www/firefox vs paxctl

[Paul Goyette <paul%whooppee.com@localhost>]

I've lately been seeing a lot of ~/plugin-container.core files being 
created, on at least a daily basis (I remove them every day, and they 
come back in the next days /etc/daily report).

It seems that we need to add plugin-container to the list of unsafe 
mprotect files:


Index: Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/www/firefox/Makefile,v
retrieving revision 1.257
diff -u -p -r1.257 Makefile
--- Makefile    16 Jun 2016 20:06:26 -0000      1.257
+++ Makefile    24 Jun 2016 22:45:27 -0000
@@ -29,6 +29,7 @@ LDFLAGS.SunOS+=               -lm

 NOT_PAX_MPROTECT_SAFE+=        lib/firefox/firefox
 NOT_PAX_MPROTECT_SAFE+=        lib/firefox/firefox-bin
+NOT_PAX_MPROTECT_SAFE+=        lib/firefox/plugin-container

 ALL_ENV+=              MOZILLA_PKG_NAME=firefox



Is anyone else reporting this?


I've just made this change.  Assuming I surive the next 24 hours without 
getting a new core file, I plan to commit tomorrow.



+------------------+--------------------------+------------------------+
| Paul Goyette     | PGP Key fingerprint:     | E-mail addresses:      |
| (Retired)        | FA29 0E3B 35AF E8AE 6651 | paul at whooppee.com   |
| Kernel Developer | 0786 F758 55DE 53BA 7731 | pgoyette at netbsd.org |
+------------------+--------------------------+------------------------+