wuggy/Dactyloidae
wuggy/Dactyloidae
1
0
Fork 0
mirror of https://repo.dactyloidae.xyz/Dactyloidae/UXP.git synced 2026-09-02 22:08:40 +09:00
Code Issues Projects Releases Packages Wiki Activity
4,909 commits 7 branches 15 tags 557 MiB
Commit graph

192 commits

Author SHA1 Message Date
roytam1
c403014cbe imported changes from mozilla NSS: 
- Bug 1755555 - Hold tokensLock through nssToken_GetSlot calls in nssTrustDomain_GetActiveSlots. r=rrelyea (a36477f0)
- Bug 1370866 - Check return value of PK11Slot_GetNSSToken. r=djackson (d7e8c2df)
- Bug 1751157 - Throw illegal_parameter alert for illegal extensions in handshake message. r=djackson (8fd5ca0c)
 2022-02-25 13:02:18 +08:00
roytam1
5b0d1f871a imported changes from mozilla NSS: 
- Bug 1737470 - Ensure DER encoded signatures are within size limits. r=jschanck,mt,bbeurdouche,rrelyea
- Bug 1735028 - check for missing signedData field r=keeler
and bump patch version.
 2021-12-27 10:42:03 +08:00
roytam1
fceddf74e6 update NSS builtin certstore to Dec 2021 version from mozilla upstream. 2021-12-20 09:20:26 +08:00
roytam1
b7cc29620e security/pkix: align pkix with nss' mozpkix bug966856 fix 2021-12-17 22:10:56 +08:00
roytam1
2a8bbf94bb security/pkix: align pkix with nss' mozpkix and fix CheckRevocation API type in application codes 2021-12-17 22:09:38 +08:00
roytam1
a140666918 imported changes from mozilla NSS: 
- Bug 966856 - mozilla::pkix: support SHA-2 hashes in CertIDs in OCSP responses r=jschanck,djackson (78d2f4a3)
 2021-12-17 16:54:54 +08:00
roytam1
190b620c2d partly import changes from tenfourfox: 
- first rolling release: update to 91ESR EV and roots, TZs, TLDs (d7c93b6cf)
- security: M1730935, M1735152, M1730048 (1603b00d0)
 2021-11-01 10:39:52 +08:00
roytam1
423d61a6f8 import changes from mozilla nss repo: 
- Bug 1662515 - Fix incorrect alert after successful decryption r=djackson
- Bug 1721476 sqlite 3.34 changed it's open semantics, causing nss failures.
- Bug 1728394 - Add TunTrust Root CA certificate to NSS. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA TLS ECC Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client RSA Root CA 2021. r=KathleenWilson
- Bug 1717707 - Add HARICA Client ECC Root CA 2021. r=KathleenWilson
 2021-09-10 11:57:20 +08:00
roytam1
6026e19d20 update NSS builtin certstore to May 2021 version from mozilla upstream. 2021-05-31 10:23:28 +08:00
roytam1
4992a2fd18 Merge remote-tracking branch 'origin/master' into custom 2021-03-16 10:32:41 +08:00
Moonchild
ed26fe34af Issue #1746 - Update pkix code with later NSS code. 2021-03-16 09:49:44 +08:00
roytam1
75da290189 Merge remote-tracking branch 'origin/master' into custom 2021-02-25 09:43:06 +08:00
Moonchild
9fd40b1c93 Issue #457 - Remove duplicate PKCS11 definitions 2021-02-25 09:26:44 +08:00
Moonchild
ef29cca224 [security] Hold mutex when accessing TSI fields. 2021-02-25 09:26:42 +08:00
roytam1
c082741e8a import changes from mozilla nss repo: 
- Bug 1682863 - Revert nssSlot_IsTokenPresent to 3.58 after ongoing Fx hangs with slow PKCS11 devices. r=bbeurdouche
- Bug 1680400 - Fix memory leak in PK11_UnwrapPrivKey. r=bbeurdouche
 2020-12-30 08:33:37 +08:00
roytam1
ecf2071a46 import changes from mozilla nss repo: 
- Bug 1641480, TLS 1.3: tighten CCS handling in compatibility mode, r=mt
- Bug 1672703, always tolerate the first CCS in TLS 1.3, r=mt
- Bug 1663661 - Guard against NULL token in nssSlot_IsTokenPresent. r=jcj
- Bug 1607449 - Lock cert->nssCertificate to prevent data race. r=jcj,keeler
- Bug 1679290 - Don't hold slot lock when taking session lock r=bbeurdouche
 2020-12-02 10:52:47 +08:00
roytam1
ee3eabdb1e sync NSS builtin cert store up to mozilla nss hg rev f8c49b33: 
- Bug 1670769 - Remove 10 GeoTrust, thawte, and VeriSign root certs from NSS. r=kjacobs,KathleenWilson
- Bug 1678166 - Add NAVER Global Root Certification Authority root cert to NSS. r=bbeurdouche,KathleenWilson
- Bug 1678189 - December 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.46. r=bbeurdouche
 2020-12-02 10:04:43 +08:00
roytam1
ee11f1749b Merge remote-tracking branch 'origin/master' into custom 2020-12-02 09:58:28 +08:00
Moonchild
d8fdbcd88c [NSS] Version and build bump 2020-12-02 09:57:49 +08:00
Moonchild
b71804f4a3 [NSS] Update root certificates. 2020-12-02 09:57:48 +08:00
roytam1
eb8926eb17 Merge remote-tracking branch 'origin/master' into custom 2020-11-19 21:12:48 +08:00
adesh
2924d30a83 Issue #1280 - Follow-up: Get rid of HPKP pinning mode. 
This was a leftover from HPKP removal.

Also remove a couple of unused variables from security/manager/ssl/nsSiteSecurityService.cpp.
 2020-11-19 21:11:43 +08:00
roytam1
4903a8dfa9 Merge remote-tracking branch 'origin/master' into custom 2020-10-30 09:27:13 +08:00
Moonchild
a77ab3da7f Issue #1656 - Nuke the remaining vim lines in UXP 
Closes #1656
 2020-10-30 09:09:20 +08:00
roytam1
75e16e5121 partly import changes from tenfourfox: 
- #627: M1631583 M1631597 M1636771 M1637222 M1649316 M1651520 (2373458b5)
- #627: M1631573 (0abd0fc5d)
 2020-10-09 21:23:26 +08:00
roytam1
56aaf6a15a Merge remote-tracking branch 'origin/master' into custom 2020-09-25 22:18:48 +08:00
Moonchild
9305760571 Issue #1656 - Part 9: Single-line-comment style. 2020-09-25 22:07:00 +08:00
Moonchild
d5919942ff Issue #1656 - Part 8: Devtools and misc. 2020-09-25 22:06:55 +08:00
Moonchild
0cd673d720 Issue #1656 - Part 6: Clean up the build files 2020-09-25 22:04:23 +08:00
Moonchild
538b420319 Issue #1656 - Part 4: Manual cleanup 2020-09-25 22:04:20 +08:00
Moonchild
d7a4abc3d4 Issue #1656 - Part 4: Tackle *.idl, *.css, *.ipdlh, *.webidl, *.cc 2020-09-25 22:04:18 +08:00
Moonchild
30df895eb2 Issue #1656 - Part 3: Nuke more vim config lines in the tree. 
Another S&R run with some smarter matching.
 2020-09-25 22:04:17 +08:00
Moonchild
8c395520d9 Issue #1656 - Part 1: Nuke most vim config lines in the tree. 
Since these are just interpreted comments, there's 0 impact on actual code.
This removes all lines that match /* vim: set(.*)tw=80: */ with S&R -- there are
a few others scattered around which will be removed manually in a second part.
 2020-09-25 22:04:12 +08:00
roytam1
64ccce7c22 partly import changes from tenfourfox: 
- #622: M1660537 M1641487(modified) M1645492 (291688840)
 2020-09-19 07:15:01 +08:00
roytam1
06a2891ef7 import certdata changes from NSS upstream: 
- Bug 1651211 - Remove EE Certification Centre Root CA root cert. r=KathleenWilson,jcj
- Bug 1653092 - Disable server trust bit for OISTE WISeKey Global Root GA CA root cert. r=KathleenWilson,jcj
- Bug 1656077 - Remove Taiwan Government Root Certification Authority root cert. r=KathleenWilson,jcj
- Bug 1663049 - Add SecureTrust's Trustwave Global root certificates to NSS. r=KathleenWilson,jcj
- Bug 1663049 - September 2020 batch of root changes, NSS_BUILTINS_LIBRARY_VERSION 2.44. r=jcj
 2020-09-19 07:05:30 +08:00
roytam1
1455a4fcbd import change from tenfourfox: 
- fix overzealous assertion (M1531906) (af9a8236e)
 2020-09-19 07:05:02 +08:00
roytam1
8fd5fd8690 Merge remote-tracking branch 'origin/master' into custom 2020-09-16 21:19:55 +08:00
adeshkp
f7b02cecab Issue #1280 - Remove hostname parameter to trust domain. 
Host name was purely being used for HPKP and since HPKP is killed,
this can also go. Currently it doesn't do anything other than
generating build warnings.
 2020-09-16 21:11:01 +08:00
Roy Tam
8015bb7004 update NSS as-of pm27 rev 7606140ee 2020-09-04 22:55:34 +08:00
Roy Tam
eeb44de4a1 Merge remote-tracking branch 'origin/master' into custom 2020-09-04 22:34:20 +08:00
Moonchild
38470e4fe9 [NSS] Version and build bump 2020-09-04 22:30:57 +08:00
J.C. Jones
0e23c7cc48 [NSS] Prevent slotLock race in NSC_GetTokenInfo 
Basically, NSC_GetTokenInfo doesn't lock slot->slotLock before accessing slot
after obtaining it, even though slotLock is defined as its lock.
 2020-09-04 22:30:55 +08:00
Roy Tam
3d5ac98e9d Merge remote-tracking branch 'origin/master' into custom 2020-07-10 22:22:14 +08:00
Moonchild
9890572c8e [NSS] Version and build bump 2020-07-10 22:18:56 +08:00
Sohaib ul Hassan
62467c473d [NSS] Implement constant-time GCD and modular inversion 
The implementation is based on the work by Bernstein and Yang
(https://eprint.iacr.org/2019/266)
"Fast constant-time gcd computation and modular inversion".

It fixes the old mp_gcd and s_mp_invmod_odd_m functions. The patch also fixes
mpl_significant_bits s_mp_div_2d and s_mp_mul_2d by having less control flow to
reduce side-channel leaks.

Co-authored by : Billy Bob Brumley
 2020-07-10 22:18:52 +08:00
Roy Tam
6ef287a52e Merge remote-tracking branch 'origin/master' into custom 2020-06-10 21:03:13 +08:00
Moonchild
594c930eca Issue #439 - Remove, fix and clean up automated tests 
With the big amount of code churn around DOM a lot of tests
broke severely enough that they caused build bustage.
This commit cleans up, removes or otherwise fixes tests
that are broken, no longer relevant or obsolete.
 2020-06-10 21:00:09 +08:00
Roy Tam
5c4cee240f Merge remote-tracking branch 'origin/master' into custom 2020-06-06 07:27:53 +08:00
Moonchild
ca3ce88bd1 [NSS] Bump NSS version 2020-06-06 07:21:18 +08:00
Moonchild
4789fee7cf [NSS] Force a fixed length for DSA exponentiation 2020-06-06 07:21:15 +08:00