CVS commit: pkgsrc/mail/thunderbird

["Ryo ONODERA" <ryoon%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   ryoon
Date:           Wed Sep  3 14:17:01 UTC 2025

Modified Files:
        pkgsrc/mail/thunderbird: Makefile distinfo
        pkgsrc/mail/thunderbird/patches:
            patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
Added Files:
        pkgsrc/mail/thunderbird/patches:
            patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp
            patch-comm_mailnews_search_src_nsMsgSearchNews.cpp
            patch-gfx_ots_src_name.cc
            patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp
            patch-js_src_editline_editline.c
            patch-third__party_wasm2c_src_c-writer.cc

Log Message:
mail/thunderbird: Update to 142.0

* Fix some EAI related runtime erros. isalpha(3)s fail.

Changelog:
142.0:
What's New

new
Visual signatures can be added to PDF attachments opened in Thunderbird

new
'Copy Message Link' and 'Copy News Link' added to header pane 'More actions'

new
Folder copy enabled within mail server accounts and local folders

new
'Reset Folder Order' option added to folder pane to reset custom folder sorting

What's Changed
changed
'Copy Message Location' removed from mail context menu

What's Fixed
fixed
Users with attachments open in tabs saw an error on Thunderbird restart

fixed
Notification sounds did not respect operating system's do-not-disturb mode

fixed
Non-English localized Thunderbird created English special folders on first
start

fixed
Users were unable to use Fastmail calendars due to missing OAuth settings

fixed
Sending from unified or local folder failed if no default account was set

fixed
Right-clicking 'List-ID' -> 'Unsubscribe' created double encoded draft subject

fixed
On Linux, the close caption button was inactive when mouse was in screen corner

fixed
Toggling dark message mode did not restore focus and scroll position

fixed
Message list scrolled back when returning to mail tab after opening a message

fixed
Deleting a single message in folder using 'Group by Sort' failed after CTRL+A

fixed
New newsgroups were not added in alphabetical order by default

fixed
After updating to version 142, all newsgroup folders were sorted alphabetically

fixed
With Thunderbird closed, clicking a 'mailto:' link to send signed message
failed

fixed
Replying could fail with mailnews.reply_quoting_selection.multi_word set false

fixed
Multiple saves while using 'Options' -> 'Send a Copy' resulted in multiple
copies

fixed
Thunderbird did not display contact photos in WebP format from CardDAV servers

fixed
Installations from Microsoft Store did not open when clicking 'mailto:' links

fixed
Clicking the backspace icon in the quick filter field cleared the input field

fixed
Initial launch had long load times and UI lag while messages downloaded

fixed
'Mark' -> 'All Read' affected newsgroup messages that had not been fetched yet

fixed
Thunderbird could not reconnect to newsgroups after connection loss until
restarted

fixed
Sending a newsgroup post appeared successful when it had actually failed

fixed
Archived RSS feed messages were sent to the archive folder of default identity

fixed
Opening Website header link in RSS feed incorrectly re-encoded URL parameters

fixed
Visual and UX improvements

fixed
Security fixes

Security fixes:
Mozilla Foundation Security Advisory 2025-70
#CVE-2025-9179: Sandbox escape due to invalid pointer in the Audio/Video: GMP
 component
#CVE-2025-9180: Same-origin policy bypass in the Graphics: Canvas2D component
#CVE-2025-9181: Uninitialized memory in the JavaScript Engine component
#CVE-2025-9182: Denial-of-service due to out-of-memory in the Graphics:
 WebRender component
#CVE-2025-9187: Memory safety bugs fixed in Firefox 142 and Thunderbird 142
#CVE-2025-9184: Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR
 140.2, Firefox 142 and Thunderbird 142
#CVE-2025-9185: Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR
 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2,
 Firefox 142 and Thunderbird 142


To generate a diff of this commit:
cvs rdiff -u -r1.347 -r1.348 pkgsrc/mail/thunderbird/Makefile
cvs rdiff -u -r1.285 -r1.286 pkgsrc/mail/thunderbird/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp \
    pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_search_src_nsMsgSearchNews.cpp \
    pkgsrc/mail/thunderbird/patches/patch-gfx_ots_src_name.cc \
    pkgsrc/mail/thunderbird/patches/patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp \
    pkgsrc/mail/thunderbird/patches/patch-js_src_editline_editline.c \
    pkgsrc/mail/thunderbird/patches/patch-third__party_wasm2c_src_c-writer.cc
cvs rdiff -u -r1.2 -r1.3 \
    pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/mail/thunderbird/Makefile
diff -u pkgsrc/mail/thunderbird/Makefile:1.347 pkgsrc/mail/thunderbird/Makefile:1.348
--- pkgsrc/mail/thunderbird/Makefile:1.347      Sat Aug 30 22:45:49 2025
+++ pkgsrc/mail/thunderbird/Makefile    Wed Sep  3 14:17:01 2025
@@ -1,9 +1,8 @@
-# $NetBSD: Makefile,v 1.347 2025/08/30 22:45:49 wiz Exp $
+# $NetBSD: Makefile,v 1.348 2025/09/03 14:17:01 ryoon Exp $
 
 DISTNAME=      thunderbird-${TB_VER}.source
 PKGNAME=       thunderbird-${TB_VER:S/esr//}
-PKGREVISION=   1
-TB_VER=                141.0
+TB_VER=                142.0
 CATEGORIES=    mail
 MASTER_SITES=  ${MASTER_SITE_MOZILLA:=thunderbird/releases/${TB_VER}/source/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/mail/thunderbird/distinfo
diff -u pkgsrc/mail/thunderbird/distinfo:1.285 pkgsrc/mail/thunderbird/distinfo:1.286
--- pkgsrc/mail/thunderbird/distinfo:1.285      Wed Jul 23 20:58:30 2025
+++ pkgsrc/mail/thunderbird/distinfo    Wed Sep  3 14:17:01 2025
@@ -1,11 +1,13 @@
-$NetBSD: distinfo,v 1.285 2025/07/23 20:58:30 ryoon Exp $
+$NetBSD: distinfo,v 1.286 2025/09/03 14:17:01 ryoon Exp $
 
-BLAKE2s (thunderbird-141.0.source.tar.xz) = 11ce5a8329afb215e4a7e02dc3eaed94e31d3460fd80aac1bce99f2fd9be8062
-SHA512 (thunderbird-141.0.source.tar.xz) = cd747c0831532f90685975567102d1bdb90a780e21209fe4b7bddf2d84ac88576766706e95e22043a30a8a89b6d3daffb56a68c3ccc4a300b8236b20d4fca675
-Size (thunderbird-141.0.source.tar.xz) = 756973792 bytes
+BLAKE2s (thunderbird-142.0.source.tar.xz) = e8d94a28ff320a87eec699eace1bc8a7974c21e38e510c679dc4e2b897a91687
+SHA512 (thunderbird-142.0.source.tar.xz) = 9a871846fc395c69688310dbf4a4569b75d3b2952a34ba1f7dc9ef5a60a34bd740087b4abb2a1a4d522dfa9d6640f2f4fcc9972a2b72160d1ed3e0df71c2901c
+Size (thunderbird-142.0.source.tar.xz) = 766056040 bytes
 SHA1 (patch-browser_app_profile_firefox.js) = bc719edef37d18655ba79b030270438ee166fdaf
 SHA1 (patch-build_moz.configure_init.configure) = 65deb3c233df0aab81eb1fca05d708e5a4ed169a
 SHA1 (patch-build_moz.configure_rust.configure) = 25ddfacd29cebbc6db005dbe61a2a7446d480678
+SHA1 (patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp) = c3e38828803536879baf2934aa1bfa50cfba0112
+SHA1 (patch-comm_mailnews_search_src_nsMsgSearchNews.cpp) = 84624c6752de1f56848a202b3a2179a2d8098e4e
 SHA1 (patch-comm_third__party_botan_configure.py) = 262f560c514d221d0df15a1906100b5e716bfdab
 SHA1 (patch-comm_third__party_libgcrypt_configure) = c5ca8a8b44c485f81139b54d341ac044189d98d3
 SHA1 (patch-config_gcc-stl-wrapper.template.h) = 9d1f15ff487efa9202114d19ed5668b4e7aa032a
@@ -14,12 +16,15 @@ SHA1 (patch-dom_base_nsAttrName.h) = ac7
 SHA1 (patch-dom_webtransport_api_WebTransportDatagramDuplexStream.cpp) = b93b4c6367bd2fb3d1868ab7d97ca56c100be414
 SHA1 (patch-gfx_angle_checkout_src_common_third__party_smhasher_src_PMurHash.cpp) = e458c9c8dc66edc69c1874734af28a77fc5e3993
 SHA1 (patch-gfx_angle_checkout_src_compiler_translator_InfoSink.h) = b2adce9e65662283a11b6dcff40e95523e940045
+SHA1 (patch-gfx_ots_src_name.cc) = 35ae5b2689eae8fab1ea351612f3628c14001f9e
+SHA1 (patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp) = 3eb9855e20fe8b7784a9620fce4ffb96f4736f82
 SHA1 (patch-gfx_wr_swgl_build.rs) = 959420365cdfb64bb5967d01d31378967753d6de
 SHA1 (patch-ipc_chromium_src_base_message__pump__libevent.cc) = 298642a3527804115b398fb7904a3596962932e3
 SHA1 (patch-ipc_chromium_src_base_platform__thread__posix.cc) = 753bb4e90758f5b42a51bbc073b328de673988cf
 SHA1 (patch-ipc_glue_GeckoChildProcessHost.cpp) = 63fbee04321f7ade20db4ccc1a1218b848344ce1
 SHA1 (patch-js-src-jit-arm64-vixl-MozCpu-vixl.cpp) = d90fca47d79551fd74214d47f8184670b901b792
 SHA1 (patch-js_public_Utility.h) = bb5464a0398b91693ab362e6b9b06d48429b9e7d
+SHA1 (patch-js_src_editline_editline.c) = ba44a33cc19d19aeaa777548ac74fc7144ea7d70
 SHA1 (patch-js_src_jit_FlushICache.cpp) = f5d1fcb391c36a29fb71a78dbf731ee6a1cb17b6
 SHA1 (patch-js_src_old-configure.in) = adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
 SHA1 (patch-js_src_util_NativeStack.cpp) = a0a16d8d8d78d3cc3f4d2a508586f1a7821f7dba
@@ -34,7 +39,7 @@ SHA1 (patch-security_nss_lib_freebl_mpi_
 SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_elf__mem__image.cc) = 2b5955027add79d1b8709667b0433b2d19fbd1bc
 SHA1 (patch-third__party_abseil-cpp_absl_debugging_internal_vdso__support.cc) = f9c44d0d6fd952296f23c24f56053958b30d8e5c
 SHA1 (patch-third__party_js_cfworker_build.sh) = 46cdf97b99cf01080f290ae8d9a33b5f869fc3e4
-SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = d0454784eb72be49162f619579e060a0de3c480f
+SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build) = d81dd1f5317c441eb35e792d96f35e5b2beb65f8
 SHA1 (patch-third__party_libwebrtc_modules_desktop__capture_linux_wayland_egl__dmabuf.cc) = fc203b7a8c1557303e61cc598dc94c5cccf6f0a4
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_device__info__v4l2.cc) = 4cb0e1c88dc83370024ed1aac7f75445b9f98df8
 SHA1 (patch-third__party_libwebrtc_modules_video__capture_linux_video__capture__v4l2.cc) = 8111952a107eb2cd665525ddd0e27c79eee3c1cd
@@ -43,6 +48,7 @@ SHA1 (patch-third__party_libwebrtc_syste
 SHA1 (patch-third__party_python_dlmanager_check.py) = 69054522d8ced8cb47e65e5a8b1a87ed5ce6708e
 SHA1 (patch-third__party_sqlite3_ext_moz.build) = 53248ac4ba98983362b173d7644f1001f5127b3c
 SHA1 (patch-third__party_sqlite3_src_moz.build) = b26856a4b87aa12211575d9982f62dc899474b52
+SHA1 (patch-third__party_wasm2c_src_c-writer.cc) = 38eb2ee0e00722aa1380540b83648b43723719aa
 SHA1 (patch-third__party_wasm2c_src_prebuilt_wasm2c__source__includes.cc) = 99d0db944f0c2d0c623460991efd423d9127c988
 SHA1 (patch-toolkit_components_terminator_nsTerminator.cpp) = e905e38ef1b88d764c695c019f15609350c1c43b
 SHA1 (patch-toolkit_moz.configure) = 1306e7ac3c3939886aff38a58dd3162e6517409b

Index: pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build
diff -u pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.2 
pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.3
--- pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build:1.2    Wed Apr 30 03:47:13 2025
+++ pkgsrc/mail/thunderbird/patches/patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build        Wed Sep  3 14:17:01 2025
@@ -1,20 +1,20 @@
-$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.2 2025/04/30 03:47:13 ryoon Exp $
+$NetBSD: patch-third__party_libwebrtc_modules_desktop__capture_desktop__capture__gn_moz.build,v 1.3 2025/09/03 14:17:01 ryoon Exp $
 
 * Disable Wayland desktop capture for non-Linux platforms.
   Fix segfault under X11.
 
---- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2024-03-11 10:11:56.287869888 +0000
+--- third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build.orig    2025-08-23 02:57:35.395483264 +0000
 +++ third_party/libwebrtc/modules/desktop_capture/desktop_capture_gn/moz.build
-@@ -392,7 +392,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
+@@ -418,7 +418,7 @@ if CONFIG["MOZ_DEBUG"] == "1" and CONFIG
  
      DEFINES["_HAS_ITERATOR_DEBUGGING"] = "0"
  
 -if CONFIG["TARGET_CPU"] == "aarch64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["TARGET_CPU"] == "aarch64" and CONFIG["OS_TARGET"] == "Linux":
  
+     DEFINES["CR_SYSROOT_KEY"] = "20250129T203412Z-1"
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
-     DEFINES["_GNU_SOURCE"] = True
-@@ -449,7 +449,7 @@ if CONFIG["OS_TARGET"] == "Linux" and CO
+@@ -470,7 +470,7 @@ if CONFIG["OS_TARGET"] == "Linux" and CO
          "/third_party/libwebrtc/modules/desktop_capture/linux/x11/x_window_property.cc"
      ]
  
@@ -23,17 +23,17 @@ $NetBSD: patch-third__party_libwebrtc_mo
  
      CXXFLAGS += [
          "-msse2"
-@@ -482,7 +482,7 @@ if CONFIG["TARGET_CPU"] == "x86" and (CO
+@@ -499,7 +499,7 @@ if CONFIG["TARGET_CPU"] == "x86" and (CO
          "/third_party/libwebrtc/modules/desktop_capture/linux/wayland/shared_screencast_stream.cc"
      ]
  
 -if CONFIG["TARGET_CPU"] == "x86_64" and (CONFIG["OS_TARGET"] == "Linux" or CONFIG["OS_TARGET"] == "NetBSD" or CONFIG["OS_TARGET"] == "OpenBSD" or CONFIG["OS_TARGET"] == "FreeBSD"):
 +if CONFIG["TARGET_CPU"] == "x86_64" and CONFIG["OS_TARGET"] == "Linux":
  
+     DEFINES["CR_SYSROOT_KEY"] = "20250129T203412Z-1"
      DEFINES["WEBRTC_USE_PIPEWIRE"] = True
-     DEFINES["_GNU_SOURCE"] = True
-@@ -628,6 +628,10 @@ if CONFIG["TARGET_CPU"] == "x86" and CON
-     DEFINES["USE_X11"] = "1"
+@@ -663,6 +663,10 @@ if CONFIG["TARGET_CPU"] == "x86_64" and 
+ 
      DEFINES["WEBRTC_USE_X11"] = True
  
 +    CXXFLAGS += [

Added files:

Index: pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp  Wed Sep  3 14:17:01 2025
@@ -0,0 +1,15 @@
+$NetBSD: patch-comm_mailnews_compose_src_nsMsgCompUtils.cpp,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+* Fix runtime segfault when sending EAI email.
+
+--- comm/mailnews/compose/src/nsMsgCompUtils.cpp.orig  2025-09-02 06:17:25.620880973 +0000
++++ comm/mailnews/compose/src/nsMsgCompUtils.cpp
+@@ -159,7 +159,7 @@ static bool isValidHost(const nsCString&
+   const auto* cur = host.BeginReading();
+   const auto* end = host.EndReading();
+   for (; cur < end; ++cur) {
+-    if (!isalpha(*cur) && !isdigit(*cur) && *cur != '-' && *cur != '_' &&
++    if (!isalpha((unsigned char)(*cur)) && !isdigit((unsigned char)(*cur)) && *cur != '-' && *cur != '_' &&
+         *cur != '.') {
+       return false;
+     }
Index: pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_search_src_nsMsgSearchNews.cpp
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_search_src_nsMsgSearchNews.cpp:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-comm_mailnews_search_src_nsMsgSearchNews.cpp  Wed Sep  3 14:17:01 2025
@@ -0,0 +1,15 @@
+$NetBSD: patch-comm_mailnews_search_src_nsMsgSearchNews.cpp,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+* Fix runtime segfault when sending EAI email.
+
+--- comm/mailnews/search/src/nsMsgSearchNews.cpp.orig  2025-09-02 06:19:15.010445347 +0000
++++ comm/mailnews/search/src/nsMsgSearchNews.cpp
+@@ -61,7 +61,7 @@ char16_t* nsMsgSearchNews::EncodeToWildm
+   if (caseInsensitiveValue) {
+     char16_t* walkValue = caseInsensitiveValue;
+     while (*value) {
+-      if (isalpha(*value)) {
++      if (isalpha((unsigned char)(*value))) {
+         *walkValue++ = (char16_t)'[';
+         *walkValue++ = ToUpperCase((char16_t)*value);
+         *walkValue++ = ToLowerCase((char16_t)*value);
Index: pkgsrc/mail/thunderbird/patches/patch-gfx_ots_src_name.cc
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-gfx_ots_src_name.cc:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-gfx_ots_src_name.cc   Wed Sep  3 14:17:01 2025
@@ -0,0 +1,13 @@
+$NetBSD: patch-gfx_ots_src_name.cc,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+--- gfx/ots/src/name.cc.orig   2025-07-26 13:25:22.747360576 +0000
++++ gfx/ots/src/name.cc
+@@ -16,7 +16,7 @@ namespace {
+ // We disallow characters outside the URI spec "unreserved characters"
+ // set; any chars outside this set will be replaced by underscore.
+ bool AllowedInPsName(char c) {
+-  return isalnum(c) || std::strchr("-._~", c);
++  return isalnum((unsigned char)c) || std::strchr("-._~", c);
+ }
+ 
+ bool SanitizePsNameAscii(std::string& name) {
Index: pkgsrc/mail/thunderbird/patches/patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp     Wed Sep  3 14:17:01 2025
@@ -0,0 +1,13 @@
+$NetBSD: patch-gfx_skia_skia_src_sksl_codegen_SkSLSPIRVCodeGenerator.cpp,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+--- gfx/skia/skia/src/sksl/codegen/SkSLSPIRVCodeGenerator.cpp.orig     2025-07-26 13:25:51.000473818 +0000
++++ gfx/skia/skia/src/sksl/codegen/SkSLSPIRVCodeGenerator.cpp
+@@ -4405,7 +4405,7 @@ void SPIRVCodeGenerator::writeFunctionSt
+             f, fSpecializationInfo, fActiveSpecializationIndex,
+             [&](int, const Variable*, const Expression* expr) {
+                 std::string name = expr->description();
+-                std::replace_if(name.begin(), name.end(), [](char c) { return !isalnum(c); }, '_');
++                std::replace_if(name.begin(), name.end(), [](char c) { return !isalnum(i(unsigned char)c); }, '_');
+ 
+                 mangledName += "_" + name;
+             });
Index: pkgsrc/mail/thunderbird/patches/patch-js_src_editline_editline.c
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-js_src_editline_editline.c:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-js_src_editline_editline.c    Wed Sep  3 14:17:01 2025
@@ -0,0 +1,31 @@
+$NetBSD: patch-js_src_editline_editline.c,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+--- js/src/editline/editline.c.orig    2025-07-26 13:19:29.740302059 +0000
++++ js/src/editline/editline.c
+@@ -337,11 +337,11 @@ do_forward(STATUS move)
+     i = 0;
+     do {
+       p = &Line[Point];
+-      for ( ; Point < End && (*p == ' ' || !isalnum(*p)); Point++, p++)
++      for ( ; Point < End && (*p == ' ' || !isalnum((unsigned char)(*p))); Point++, p++)
+           if (move == CSmove)
+               right(CSstay);
+ 
+-      for (; Point < End && isalnum(*p); Point++, p++)
++      for (; Point < End && isalnum((unsigned char)(*p)); Point++, p++)
+           if (move == CSmove)
+               right(CSstay);
+ 
+@@ -1166,10 +1166,10 @@ bk_word()
+ 
+     i = 0;
+     do {
+-      for (p = &Line[Point]; p > Line && !isalnum(p[-1]); p--)
++      for (p = &Line[Point]; p > Line && !isalnum((unsigned char)(p[-1])); p--)
+           left(CSmove);
+ 
+-      for (; p > Line && p[-1] != ' ' && isalnum(p[-1]); p--)
++      for (; p > Line && p[-1] != ' ' && isalnum((unsigned char)(p[-1])); p--)
+           left(CSmove);
+ 
+       if (Point == 0)
Index: pkgsrc/mail/thunderbird/patches/patch-third__party_wasm2c_src_c-writer.cc
diff -u /dev/null pkgsrc/mail/thunderbird/patches/patch-third__party_wasm2c_src_c-writer.cc:1.1
--- /dev/null   Wed Sep  3 14:17:01 2025
+++ pkgsrc/mail/thunderbird/patches/patch-third__party_wasm2c_src_c-writer.cc   Wed Sep  3 14:17:01 2025
@@ -0,0 +1,13 @@
+$NetBSD: patch-third__party_wasm2c_src_c-writer.cc,v 1.1 2025/09/03 14:17:01 ryoon Exp $
+
+--- third_party/wasm2c/src/c-writer.cc.orig    2025-07-26 13:24:19.226278807 +0000
++++ third_party/wasm2c/src/c-writer.cc
+@@ -1490,7 +1490,7 @@ void CWriter::WriteInitExprTerminal(cons
+ std::string CWriter::GenerateHeaderGuard() const {
+   std::string result;
+   for (char c : header_name_) {
+-    if (isalnum(c) || c == '_') {
++    if (isalnum((unsigned char)c) || c == '_') {
+       result += toupper(c);
+     } else {
+       result += '_';