Commit graph

96 commits

Author SHA1 Message Date
Gaming4JC
6d3168b74b backport m-c bug 1333172 - Avoid 1100 warnings by replacing NS_ENSURE_SUCCESS in nsNetUtilInlines.h:180 2019-02-16 00:16:24 +08:00
Gaming4JC
961f369d66 backport m-c bug 1333174 - Don't use NS_ENSURE_SUCCESS at nsIOService:793
Log spam fix. Suppresses 1,100 instances of NS_ENSURE_SUCCESS(rv, rv) failed with result 0x80520012 emitted from netwerk/base/nsIOService.cpp during linux64 debug testing. Backports [m-c 1333174](https://bugzilla.mozilla.org/show_bug.cgi?id=1333174).
2019-02-16 00:16:22 +08:00
wolfbeast
4e119039ec Remove telemetry from cache v1 service locking (part2).
- Fold Lock(TelemetryID) into Lock();
- Fold nsCacheServiceAutoLock(TelemetryID) into nsCacheServiceAutoLock();

Tag #21.
2019-02-16 00:15:00 +08:00
wolfbeast
e0caf31e61 Remove telemetry from cache v1 service locking (part1).
Tag #21.
2019-02-16 00:14:58 +08:00
wolfbeast
62f3738128 Remove unused telemetry functions/variables.
Tag #21.
2019-02-16 00:14:57 +08:00
wolfbeast
775dc680e9 Remove cache I/O telemetry.
Tag #21.
2019-02-16 00:14:55 +08:00
wolfbeast
b882e7c6be Remove telemetry probes to get detailed disk cache hit rate.
Tag #21.
2019-02-16 00:14:54 +08:00
wolfbeast
e87890d893 Remove telemetry probes for cache file system. 2019-02-16 00:14:52 +08:00
wolfbeast
57251fc4e7 Clean up a number of unused variables.
Tag #21.
2019-02-16 00:14:50 +08:00
wolfbeast
f019ffbb0b Remove telemetry to find optimal cache entry hash size
Tag #21.
2019-02-16 00:14:40 +08:00
Gaming4JC
30797d4da8 backport mozbug 1334776 - CVE-2017-7797 Header name interning leaks across origins
Potential attack: session supercookie.

[Moz Notes](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c5):
"The problem is that for unknown header names we store the first one we see and then later we case-insensitively match against that name *globally*. That means you can track if a user agent has already seen a certain header name used (by using a different casing and observing whether it gets normalized). This would allow you to see if a user has used a sensitive service that uses custom header names, or allows you to track a user across sites, by teaching the browser about a certain header case once and then observing if different casings get normalized to that.

What we should do instead is only store the casing for a header name for each header list and not globally. That way it only leaks where it's expected (and necessary) to leak."

[Moz fix note](https://bugzilla.mozilla.org/show_bug.cgi?id=1334776#c8):
"nsHttpAtom now holds the old nsHttpAtom and a string that is case sensitive (only for not standard headers).
So nsHttpAtom holds a pointer to a header name. (header names are store on a static structure). This is how it used to be. I left that part the same but added a nsCString which holds a string that was used to resoled the header name. So when we parse headers we call ResolveHeader with a char*. If it is a new header name the char* will be stored in a HttpHeapAtom, nsHttpAtom::_val will point to HttpHeapAtom::value and the same strings will be stored in mLocalCaseSensitiveHeader. For the first resolve request they will be the same but for the following maybe not. At the end this nsHttpAtom will be stored in nsHttpHeaderArray. For all operation we will used the old char* except when we are returning it to a script using VisitHeaders."
2019-02-16 00:14:28 +08:00
Gaming4JC
de28886722 backport mozbug 1444532 - fix a leak in SHA256 in nsHttpConnectionInfo.cpp r=mayhemer
The original code (from bug 1200802) declared an XPCOM object as a static bare pointer,
which for future reference is probably never the right thing to do. It might have worked if
it was cleared before shutdown but it never was.
2019-02-16 00:14:27 +08:00
Gaming4JC
470aebd09b backport mozbug 1344613 - Avoid possibility of null pointer crash in nsSOCKSIOLayer.cpp r=mayhemer 2019-02-16 00:14:24 +08:00
wolfbeast
07df2cf12a Add a null check in nsHttpTransaction::Close.
This resolves #776.
2019-02-16 00:14:04 +08:00
wolfbeast
ad782894c8 Remove all C++ telemetry autotimers 2019-02-16 00:12:34 +08:00
wolfbeast
8c8145e620 Remove all C++ Telemetry Accumulation calls.
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2019-02-16 00:12:32 +08:00
wolfbeast
e2e197cada Remove support for TLS session caches in TLSServerSocket.
This resolves #738
2019-02-16 00:12:22 +08:00
JustOff
16820f40ac Refresh nsStringBundleService and nsHttpHandler when the browser locale is changed 2019-02-16 00:12:09 +08:00
wolfbeast
8effb3030e Reinstate RC4 and mark 3DES weak.
Tag #709
2019-02-16 00:11:24 +08:00
trav90
a52bf9e82b Remove the const to fix the -Wignored-qualifiers warning with GCC 8 2019-02-16 00:10:59 +08:00
SpockMan02
d330e7e8fc Issue #686: Un-deprecate the Application Cache API 2019-02-16 00:10:43 +08:00
janekptacijarabaci
acb5d5839b Fixed misleading console error message for multiple CORS headers 2019-02-16 00:10:27 +08:00
wolfbeast
5ffd703f79 Make nsAtomicFileOutputStream::DoOpen() fail if the file is read-only.
This means we don't leave behind prefs-<n>.js files when prefs.js is read-only.
2019-02-16 00:08:11 +08:00
wolfbeast
c60c15e659 Remove pref confusion around cache v2
- Renames browser.cache.use_new_backend to browser.cache.backend
- Sets browser.cache.backend to 1 (use cache v2)
- Removes browser.cache.use_new_backend_temp
2019-02-16 00:07:24 +08:00
wolfbeast
8c917ef35e Fix cache v1 compression crash in nsCompressOutputStreamWrapper::Close() 2019-02-16 00:07:23 +08:00
Pale Moon
b177c40274 Cherry-pick user sctp rev SVN8789a6da02e2c7c03522bc6f275b302f6ef977fe 2019-02-16 00:07:07 +08:00
wolfbeast
7b82a2ece4 Remove SSL Error Reporting telemetry 2019-02-16 00:06:16 +08:00
wolfbeast
ea5ece2be9 WebRTC: Nullcheck DataChannel SendPacket calls. 2019-02-16 00:06:10 +08:00
janekptacijarabaci
09a81da02d CSP: Support for "LoadInfo::GetLoadingContext" and "LoadInfo::GetLoadingContextXPCOM()"
https://bugzilla.mozilla.org/show_bug.cgi?id=1439713 (partially)
2019-02-16 00:04:33 +08:00
wolfbeast
624aa2c581 Fix SSL status ambiguity.
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
2019-02-16 00:03:48 +08:00
Valentin Gosu
bfe6f25a2d Sanity-check in nsStandardURL::Deserialize(). r=mayhemer, a=RyanVM
Also add test for faulty nsStandardURL deserialization.

See Bug 1392739.
2019-02-16 00:02:02 +08:00
wolfbeast
155cee3aae Revert "Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec."
This reverts commit 6c3f95480a191ce432ddfb2aa400a6d70c4884a8.
2019-02-16 00:01:11 +08:00
wolfbeast
b74e38782d Port our stricter cookie gating.
This addresses the critical section of #449.
2019-02-16 00:00:52 +08:00
janekptacijarabaci
4a6ce109b1 Build - throws a warning: 'rv': unreferenced local variable
PR #412
2019-02-15 23:59:49 +08:00
Gaming4JC
d4ac94cf3e Remove support and tests for HSTS priming from the tree. Fixes #384 2019-02-15 23:59:39 +08:00
wolfbeast
fdf7ba29b4 Fix sec pref locations and enable HPKP checking by default.
Some prefs were incorrectly in all.js (ocsp and hpkp)
2019-02-15 23:59:35 +08:00
Jan Steffens
51c2477b99 Bug 1314968 - Explicitly specify the AccessPoint interface name. r=kanru
The DBus specification allows passing an empty string as the interface to the
org.freedesktop.DBus.Properties.GetAll call to get all properties, throwing away the namespace
(interface) information.

However, GDBus does not allow this. When NetworkManager moved to using GDBus, Firefox lost the
ability to retrieve access points from NetworkManager.

Since we're only interested in properties from the org.freedesktop.NetworkManager.AccessPoint
interface, name it explicitly. This works with both the old and the new NetworkManager.

MozReview-Commit-ID: Kc5HaYvwfRZ

--HG--
extra : rebase_source : e1550d327e5a4ea05b8d35d98ef7b27c0add709b
2019-02-15 23:58:07 +08:00
JustOff
0aeb4a7e15 Revert incorrect UAO optimization that broke SSUAO 2019-02-15 23:57:29 +08:00
wolfbeast
74df182488 Remove other gonk widget conditionals and unused files.
Tag #288.
2019-02-15 23:57:15 +08:00
wolfbeast
0e73df8e21 Fix incorrectly removed #includes
Tag #288.
2019-02-15 23:57:12 +08:00
wolfbeast
2531de02eb Remove MOZ_WIDGET_GONK [2/2]
Tag #288
2019-02-15 23:57:10 +08:00
wolfbeast
719ac1bc38 Remove MOZ_B2G leftovers and some dead B2G-only components. 2019-02-15 23:57:05 +08:00
trav90
648b8b2917 Remove nameprep.c from moz.build
Follow up to e6d4a8daf3497986d55bd4b4cfd85b11bc5684d1
2019-02-15 23:56:23 +08:00
wolfbeast
6b2478e225 Issue #325 Part 11: Fix up build files. 2019-02-15 23:56:12 +08:00
wolfbeast
1af1f5b3a3 Issue #325 Part 1: Remove the legacy non-IDNA2008 code path from nsIDNService. 2019-02-15 23:55:56 +08:00
janekptacijarabaci
846daf6d3b Bug 1182569: Update ContentSecurityManager to handle docshell loads 2019-02-15 23:54:22 +08:00
janekptacijarabaci
6885700c5b moebius#158: The Performance Resource Timing (added support for "workerStart")
https://github.com/MoonchildProductions/moebius/pull/158
2019-02-15 23:53:25 +08:00
wolfbeast
63045af8a2 Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec. 2019-02-15 23:50:30 +08:00
janekptacijarabaci
7f09dee539 moebius#187: DOM - nsIContentPolicy - context (document)
https://github.com/MoonchildProductions/moebius/pull/187
2019-02-15 23:49:47 +08:00
janekptacijarabaci
850879535a Revert "Bug 1182569: Update ContentSecurityManager to handle docshell loads"
This reverts commit 2e33335820b2816bee111e78588ac82e401c86ae.
2019-02-15 23:49:44 +08:00