2018-12-12 15:08:50 +01:00
|
|
|
# $NetBSD: mozilla-common.mk,v 1.121 2018/12/12 14:08:50 ryoon Exp $
|
2013-05-23 15:12:13 +02:00
|
|
|
#
|
|
|
|
|
# common Makefile fragment for mozilla packages based on gecko 2.0.
|
|
|
|
|
#
|
|
|
|
|
# used by www/firefox/Makefile
|
|
|
|
|
# used by www/seamonkey/Makefile
|
|
|
|
|
|
2018-06-29 14:51:55 +02:00
|
|
|
# Python 2.7 and Python 3.5 or later are required simultaneously.
|
|
|
|
|
PYTHON_VERSIONS_ACCEPTED= 27
|
|
|
|
|
PYTHON_FOR_BUILD_ONLY= tool
|
2018-07-06 22:50:03 +02:00
|
|
|
.if !empty(PYTHON_VERSION_DEFAULT:M37) || !empty(PYTHON_VERSION_DEFAULT:M36) \
|
|
|
|
|
|| !empty(PYTHON_VERSION_DEFAULT:M35)
|
2018-06-29 14:51:55 +02:00
|
|
|
TOOL_DEPENDS+= python${PYTHON_VERSION_DEFAULT}-[0-9]*:../../lang/python${PYTHON_VERSION_DEFAULT}
|
|
|
|
|
ALL_ENV+= PYTHON3=${LOCALBASE}/bin/python${PYTHON_VERSION_DEFAULT:S/3/3./}
|
|
|
|
|
.else
|
2018-07-06 22:50:03 +02:00
|
|
|
TOOL_DEPENDS+= python37-[0-9]*:../../lang/python37
|
|
|
|
|
ALL_ENV+= PYTHON3=${LOCALBASE}/bin/python3.7
|
2018-06-29 14:51:55 +02:00
|
|
|
.endif
|
|
|
|
|
|
2018-03-21 17:06:29 +01:00
|
|
|
HAS_CONFIGURE= yes
|
|
|
|
|
CONFIGURE_ARGS+= --prefix=${PREFIX}
|
|
|
|
|
USE_TOOLS+= pkg-config perl gmake autoconf213 unzip zip
|
2018-11-04 01:38:44 +01:00
|
|
|
USE_LANGUAGES+= c99 gnu++14
|
2018-03-21 17:06:29 +01:00
|
|
|
UNLIMIT_RESOURCES+= datasize
|
|
|
|
|
|
2016-02-26 11:57:45 +01:00
|
|
|
.include "../../mk/bsd.prefs.mk"
|
|
|
|
|
|
2018-11-04 01:38:44 +01:00
|
|
|
TOOL_DEPENDS+= cbindgen-[0-9]*:../../devel/cbindgen
|
2018-11-07 13:55:11 +01:00
|
|
|
.if ${MACHINE_ARCH} == "sparc64"
|
|
|
|
|
CONFIGURE_ARGS+= --disable-nodejs
|
|
|
|
|
.else
|
2018-11-04 01:38:44 +01:00
|
|
|
TOOL_DEPENDS+= nodejs-[0-9]*:../../lang/nodejs
|
2018-11-07 13:55:11 +01:00
|
|
|
.endif
|
2018-11-04 01:38:44 +01:00
|
|
|
|
2015-11-08 01:46:22 +01:00
|
|
|
.if ${MACHINE_ARCH} == "i386" || ${MACHINE_ARCH} == "x86_64"
|
|
|
|
|
BUILD_DEPENDS+= yasm>=1.1:../../devel/yasm
|
Update to 49.0
Changelog:
New
Updated Firefox Login Manager to allow HTTPS pages to use saved HTTP logins. It’s one more way Firefox is supporting Let’s Encrypt and helping users transition to a more secure web.
Added features to Reader Mode that make it easier on the eyes and the ears
Controls that allow users to adjust the width and line spacing of text
Narrate, which reads the content of a page out loud
Improved video performance for users on systems that support SSSE3 without hardware acceleration
Added context menu controls to HTML5 audio and video that let users loops files or play files at 1.25x speed
Enhancements for Mac users
Improved performance on OS X systems without hardware acceleration
Improved appearance of anti-aliased OS X fonts
Improvements in about:memory reports for tracking font memory usage
Improve performance on Windows systems without hardware acceleration
Fixed
Fixed an issue that prevented users from updating Firefox for Mac unless they originally installed Firefox. Now, those users as well as any user with administrative credentials can update Firefox.
Various security fixes
Changed
Ended Firefox for Mac support for OS X 10.6, 10.7, and 10.8.
Ended Firefox for Windows support for SSE processors
Removed Firefox Hello
Re-enabled the default for Graphite2 font shaping
Developer
Added a Cause column to the Network Monitor to show what caused each network request
Introduced web speech synthesis API
Fixed in Firefox 49
2016-85 Security vulnerabilities fixed in Firefox 49
CVE-2016-2827 - Out-of-bounds read in mozilla::net::IsValidReferrerPolicy [low]
Reporter: Atte Kettunen
Description: A content security policy (CSP) containing a referrer directive with no values can cause a non-exploitable crash. [1289085]
CVE-2016-5270 - Heap-buffer-overflow in nsCaseTransformTextRunFactory::TransformString [high]
Reporter: Atte Kettunen
Description: An out-of-bounds write of a boolean value during text conversion with some unicode characters. [1291016]
CVE-2016-5271 - Out-of-bounds read in PropertyProvider::GetSpacingInternal [low]
Reporter: Abhishek Arya
Description: An out-of-bounds read during the processing of text runs in some pages using display:contents. [1288946]
CVE-2016-5272 - Bad cast in nsImageGeometryMixin [high]
Reporter: Abhishek Arya
Description: A bad cast when processing layout with input elements can result in a potentially exploitable crash. [1297934]
CVE-2016-5273 - crash in mozilla::a11y::HyperTextAccessible::GetChildOffset [high]
Reporter: Nils
Description: A potentially exploitable crash in accessibility [1280387]
CVE-2016-5276 - Heap-use-after-free in mozilla::a11y::DocAccessible::ProcessInvalidationList [high]
Reporter: Nils
Description: A use-after-free vulnerability triggered by setting a aria-owns attribute [1287721]
CVE-2016-5274 - use-after-free in nsFrameManager::CaptureFrameState [high]
Reporter: Nils
Description: A use-after-free issue in web animations during restyling. [1282076]
CVE-2016-5277 - Heap-use-after-free in nsRefreshDriver::Tick [high]
Reporter: Nils
Description: A user-after-free vulnerability with web animations when destroying a timeline [1291665]
CVE-2016-5275 - global-buffer-overflow in mozilla::gfx::FilterSupport::ComputeSourceNeededRegions [critical]
Reporter: Nils
Description: A buffer overflow when working with empty filters during canvas rendering [1287316]
CVE-2016-5278 - Heap-buffer-overflow in nsBMPEncoder::AddImageFrame [critical]
Reporter: Nils
Description: A potentially exploitable crash caused by a buffer overflow while encoding image frames to images [1294677]
CVE-2016-5279 - Full local path of files is available to web pages after drag and drop [moderate]
Reporter: Rafael Gieschke
Description: The full path to local files is available to scripts when local files are drag and dropped into Firefox [1249522]
CVE-2016-5280 - Use-after-free in mozilla::nsTextNodeDirectionalityMap::RemoveElementFromMap [high]
Reporter: Mei Wang
Description: Use-after-free vulnerability when changing text direction [1289970]
CVE-2016-5281 - use-after-free in DOMSVGLength [high]
Reporter: Brian Carpenter
Description: Use-after-free vulnerability when manipulating SVG format content through script [1284690]
CVE-2016-5282 - Don't allow content to request favicons from non-whitelisted schemes [moderate]
Reporter: Richard Newman
Description: Favicons can be loaded through non-whitelisted protocols, such as jar: [932335]
CVE-2016-5283 - <iframe src> fragment timing attack can reveal cross-origin data [high]
Reporter: Gavin Sharp
Description: A timing attack vulnerability using iframes to potentially reveal private data using document resizes and link colors [928187]
CVE-2016-5284 - Add-on update site certificate pin expiration [high]
Reporter: Ryan Duff
Description: Due to flaws in the process we used to update "Preloaded Public Key Pinning" in our releases, the pinning for add-on updates became ineffective in early September. An attacker who was able to get a mis-issued certificate for a Mozilla web site could send malicious add-on updates to users on networks controlled by the attacker. Users who have not installed any add-ons are not affected. [1303127]
CVE-2016-5256 - Memory safety bugs fixed in Firefox 49 [critical]
Reporter: Mozilla developers
Description: Mozilla developers Christoph Diehl, Christian Holler, Gary Kwong, Nathan Froyd, Honza Bambas, Seth Fowler, and Michael Smith reported memory safety bugs present in Firefox 48. Some of these bugs showed evidence of memory corruption under certain circumstances could potentially exploited to run arbitrary code. [Memory safety bugs fixed in Firefox 49]
CVE-2016-5257 - Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4 [critical]
Reporter: Mozilla developers
Description: Mozilla developers and community members Christoph Diehl, Andrew McCreight, Dan Minor, Byron Campen, Jon Coppeard, Steve Fink, Tyson Smith, Philipp, and Carsten Book reported memory safety bugs present in Firefox 48 and Firefox ESR 45.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code. [Memory safety bugs fixed in Firefox 49 and Firefox ESR 45.4]
2016-09-20 22:01:41 +02:00
|
|
|
|
|
|
|
|
# Enable Google widevine CDM. This requires external libwidevinecdm.so.
|
2017-02-20 13:22:53 +01:00
|
|
|
#CONFIGURE_ARGS+= --enable-eme=widevine
|
2015-11-08 01:46:22 +01:00
|
|
|
.endif
|
|
|
|
|
|
2018-01-24 17:52:08 +01:00
|
|
|
# For rustc/cargo detection
|
|
|
|
|
CONFIGURE_ARGS+= --target=${MACHINE_GNU_PLATFORM:Q}
|
|
|
|
|
CONFIGURE_ARGS+= --host=${MACHINE_GNU_PLATFORM:Q}
|
2013-05-23 15:12:13 +02:00
|
|
|
|
2017-09-30 07:34:11 +02:00
|
|
|
CONFIGURE_ENV+= BINDGEN_CFLAGS="-isystem${PREFIX}/include/nspr \
|
|
|
|
|
-isystem${X11BASE}/include/pixman-1"
|
|
|
|
|
|
2015-04-12 11:02:39 +02:00
|
|
|
test:
|
|
|
|
|
cd ${WRKSRC}/${OBJDIR}/dist/bin && \
|
|
|
|
|
./run-mozilla.sh ${WRKSRC}/mach check-spidermonkey
|
|
|
|
|
|
2014-05-05 07:04:46 +02:00
|
|
|
# tar(1) of OpenBSD 5.5 has no --exclude command line option.
|
|
|
|
|
.if ${OPSYS} == "OpenBSD"
|
2015-11-25 13:54:07 +01:00
|
|
|
TOOLS_PLATFORM.tar= ${TOOLS_PATH.bsdtar}
|
2014-05-05 07:04:46 +02:00
|
|
|
USE_TOOLS+= bsdtar
|
|
|
|
|
.endif
|
2018-09-21 12:11:19 +02:00
|
|
|
GCC_REQD+= 6.1
|
2018-07-16 01:15:01 +02:00
|
|
|
.if !empty(MACHINE_PLATFORM:MNetBSD-[0-7]**-*) || \
|
|
|
|
|
!empty(MACHINE_PLATFORM:MNetBSD-8.[0-8]*-*)
|
|
|
|
|
USE_PKGSRC_GCC_RUNTIME= yes
|
|
|
|
|
.endif
|
2014-10-18 19:56:35 +02:00
|
|
|
.if ${MACHINE_ARCH} == "i386"
|
2013-08-25 03:41:08 +02:00
|
|
|
# Fix for PR pkg/48152.
|
2015-09-29 17:22:07 +02:00
|
|
|
CXXFLAGS+= -march=i586
|
2015-03-17 04:19:08 +01:00
|
|
|
# This is required for SSE2 code under i386.
|
2015-09-25 00:36:27 +02:00
|
|
|
CXXFLAGS+= -mstackrealign
|
2013-05-23 15:12:13 +02:00
|
|
|
.endif
|
|
|
|
|
|
Update to 62.0
Changelog:
New
Firefox Home (the default New Tab) now allows users to display up to
4 rows of top sites, Pocket stories, and highlights
"Reopen in Container" tab menu option appears for users with Containers
that lets them choose to reopen a tab in a different container
In advance of removing all trust for Symantec-issued certificates in
Firefox 63, a preference was added that allows users to distrust
certificates issued by Symantec. To use this preference, go to
about:config in the address bar and set the preference
"security.pki.distrust_ca_policy" to 2.
Added FreeBSD support for WebAuthn
Improved graphics rendering for Windows users without accelerated hardware
using Parallel-Off-Main-Thread Painting
Support for CSS Shapes, allowing for richer web page layouts. This goes
hand in hand with a brand new Shape Path Editor in the CSS inspector.
CSS Variable Fonts (OpenType Font Variations) support, which makes it
possible to create beautiful typography with a single font file
Updates for enterprise environments:
AutoConfig is sandboxed to the documented API by default. You
can disable the sandbox by setting the preference
general.config.sandbox_enabled to false. Our long term plan is to
remove the ability to turn off the sandboxing. If you need to
continue to use more complex AutoConfig scripts, you will need to use
Firefox Extended Support Release (ESR).
Added Canadian English (en-CA) locale
Changed
Removed the description field for bookmarks. Users who have stored
descriptions using the field may wish to export these descriptions
as html or json files, as they will be removed in a future release.
Dark theme is automatically enabled in macOS 10.14 dark mode
Changed the default setting to Enforce (3) for the
security.pki.name_matching_mode preference
Adobe Flash applets now run in a more secure mode using process
sandboxing on macOS. Learn how this may affect features here.
Users disconnecting from Sync are now offered the option to wipe
their Firefox profile data (including bookmarks, passwords, history,
cookies, and site data) from their desktop computer
Changed how WebRTC handles screen sharing: When screen-sharing a window,
the window will be brought to front
Developer
Three-pane Inspector in Developer Tools separates the rules into its own
panel
2018-09-05 17:29:58 +02:00
|
|
|
CXXFLAGS+= -D__HAVE_INLINE___ISINF
|
|
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}security/nss/tests/libpkix/libpkix.sh
|
|
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}security/nss/tests/multinit/multinit.sh
|
2014-03-13 00:41:33 +01:00
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}js/src/tests/update-test262.sh
|
2014-04-30 17:07:17 +02:00
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}intl/icu/source/configure
|
2015-07-03 12:25:40 +02:00
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}browser/components/loop/run-all-loop-tests.sh
|
2016-03-08 22:32:52 +01:00
|
|
|
CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}browser/extensions/loop/run-all-loop-tests.sh
|
2018-11-04 01:38:44 +01:00
|
|
|
#CHECK_PORTABILITY_SKIP+=${MOZILLA_DIR}modules/pdfium/update.sh
|
2013-05-23 15:12:13 +02:00
|
|
|
|
2017-12-10 01:45:09 +01:00
|
|
|
CONFIGURE_ARGS+= --enable-default-toolkit=cairo-gtk3
|
2018-11-04 01:38:44 +01:00
|
|
|
CONFIGURE_ARGS+= --enable-release
|
|
|
|
|
CONFIGURE_ARGS+= --enable-rust-simd
|
|
|
|
|
CONFIGURE_ARGS+= --enable-webrender=build
|
2013-08-07 14:17:54 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-tests
|
2018-03-17 01:59:02 +01:00
|
|
|
# Mozilla Bug 1432751
|
|
|
|
|
#CONFIGURE_ARGS+= --enable-system-cairo
|
2013-05-23 15:12:13 +02:00
|
|
|
CONFIGURE_ARGS+= --enable-system-pixman
|
|
|
|
|
CONFIGURE_ARGS+= --with-system-libvpx
|
2017-04-27 03:49:47 +02:00
|
|
|
# textproc/hunspell 1.3 is too old
|
|
|
|
|
#CONFIGURE_ARGS+= --enable-system-hunspell
|
2013-05-23 15:12:13 +02:00
|
|
|
CONFIGURE_ARGS+= --enable-system-ffi
|
2013-09-19 14:37:49 +02:00
|
|
|
CONFIGURE_ARGS+= --with-system-icu
|
2013-05-23 15:12:13 +02:00
|
|
|
CONFIGURE_ARGS+= --with-system-nss
|
|
|
|
|
CONFIGURE_ARGS+= --with-system-nspr
|
2018-11-04 01:38:44 +01:00
|
|
|
#CONFIGURE_ARGS+= --with-system-jpeg
|
2013-08-07 14:17:54 +02:00
|
|
|
CONFIGURE_ARGS+= --with-system-zlib
|
|
|
|
|
CONFIGURE_ARGS+= --with-system-bz2
|
2013-05-23 15:12:13 +02:00
|
|
|
CONFIGURE_ARGS+= --with-system-libevent=${BUILDLINK_PREFIX.libevent}
|
|
|
|
|
CONFIGURE_ARGS+= --disable-crashreporter
|
|
|
|
|
CONFIGURE_ARGS+= --disable-necko-wifi
|
|
|
|
|
CONFIGURE_ARGS+= --enable-chrome-format=flat
|
2013-06-07 17:15:23 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-libjpeg-turbo
|
2013-05-23 15:12:13 +02:00
|
|
|
|
2013-08-07 14:17:54 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-gconf
|
|
|
|
|
#CONFIGURE_ARGS+= --enable-readline
|
2013-09-19 14:37:49 +02:00
|
|
|
CONFIGURE_ARGS+= --disable-icf
|
2013-12-15 14:54:37 +01:00
|
|
|
CONFIGURE_ARGS+= --disable-updater
|
2013-08-07 14:17:54 +02:00
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
SUBST_CLASSES+= fix-paths
|
|
|
|
|
SUBST_STAGE.fix-paths= pre-configure
|
|
|
|
|
SUBST_MESSAGE.fix-paths= Fixing absolute paths.
|
|
|
|
|
SUBST_FILES.fix-paths+= ${MOZILLA_DIR}xpcom/io/nsAppFileLocationProvider.cpp
|
|
|
|
|
SUBST_SED.fix-paths+= -e 's,/usr/lib/mozilla/plugins,${PREFIX}/lib/netscape/plugins,g'
|
|
|
|
|
|
2018-02-10 08:02:47 +01:00
|
|
|
SUBST_CLASSES+= prefix
|
|
|
|
|
SUBST_STAGE.prefix= pre-configure
|
|
|
|
|
SUBST_MESSAGE.prefix= Setting PREFIX
|
|
|
|
|
SUBST_FILES.prefix+= ${MOZILLA_DIR}xpcom/build/BinaryPath.h
|
|
|
|
|
SUBST_VARS.prefix+= PREFIX
|
|
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
CONFIG_GUESS_OVERRIDE+= ${MOZILLA_DIR}build/autoconf/config.guess
|
|
|
|
|
CONFIG_GUESS_OVERRIDE+= ${MOZILLA_DIR}js/src/build/autoconf/config.guess
|
|
|
|
|
CONFIG_GUESS_OVERRIDE+= ${MOZILLA_DIR}nsprpub/build/autoconf/config.guess
|
|
|
|
|
CONFIG_GUESS_OVERRIDE+= ${MOZILLA_DIR}/js/ctypes/libffi/config.guess
|
|
|
|
|
CONFIG_SUB_OVERRIDE+= ${MOZILLA_DIR}build/autoconf/config.sub
|
|
|
|
|
CONFIG_SUB_OVERRIDE+= ${MOZILLA_DIR}js/src/build/autoconf/config.sub
|
|
|
|
|
CONFIG_SUB_OVERRIDE+= ${MOZILLA_DIR}nsprpub/build/autoconf/config.sub
|
|
|
|
|
CONFIG_SUB_OVERRIDE+= ${MOZILLA_DIR}/js/ctypes/libffi/config.sub
|
|
|
|
|
|
Update to 52.0
* Switch to GTK3 build
* Remove py-sqlite2 dependency, fix PR pkg/52032
Changelog:
New
Added support for WebAssembly, an emerging standard that brings near-native performance to Web-based games, apps, and software libraries without the use of plugins.
Added automatic captive portal detection, for easier access to Wi-Fi hotspots. When accessing the Internet via a captive portal, Firefox will alert users and open the portal login page in a new tab.
Added user warnings for non-secure HTTP pages with logins. Firefox now displays a "This connection is not secure" message when users click into the username and password fields on pages that don't use HTTPS.
Implemented the Strict Secure Cookies specification which forbids insecure HTTP sites from setting cookies with the "secure" attribute. In some cases, this will prevent an insecure site from setting a cookie with the same name as an existing "secure" cookie from the same base domain.
Enhanced Sync to allow users to send and open tabs from one device to another.
Fixed
Various security fixes
Improved text input for third-party keyboard layouts on Windows. This will address some keyboard layouts that
* have chained dead keys
* input two or more characters with a non-printable key or a dead key sequence
* input a character even when a dead key sequence failed to compose a character
Changed
Removed support for Netscape Plugin API (NPAPI) plugins other than Flash. Silverlight, Java, Acrobat and the like are no longer supported.
Removed Battery Status API to reduce fingerprinting of users by trackers
Improved experience for downloads:
* Notification in the toolbar when a download fails
* Quick access to five most recent downloads rather than three
* Larger buttons for canceling and restarting downloads
Display (but allow users to override) an "Untrusted Connection" error when encountering SHA-1 certificates that chain up to a root certificate included in Mozilla's CA Certificate Program. (Note: Firefox continues to permit SHA-1 certificates that chain to manually imported root certificates.) Read more about the Mozilla Security Team's plans to deprecate SHA-1
Migrated Firefox users on Windows XP and Windows Vista operating systems to the extended support release (ESR) version of Firefox.
When not using Direct2D on Windows, Skia is used for content rendering
Developer
Enabled CSS Grid Layout, opening up a world of new possibilities for graphic design
Redesigned Responsive Design Mode to include device selection, network throttling, and more
Improved security for screen sharing, which now shows a preview and no longer requires a whitelisted domain
unresolved
Google Hangouts temporarily won't work
Security fixes:
#CVE-2017-5400: asm.js JIT-spray bypass of ASLR and DEP
#CVE-2017-5401: Memory Corruption when handling ErrorResult
#CVE-2017-5402: Use-after-free working with events in FontFace objects
#CVE-2017-5403: Use-after-free using addRange to add range to an incorrect root object
#CVE-2017-5404: Use-after-free working with ranges in selections
#CVE-2017-5406: Segmentation fault in Skia with canvas operations
#CVE-2017-5407: Pixel and history stealing via floating-point timing side channel with SVG filters
#CVE-2017-5410: Memory corruption during JavaScript garbage collection incremental sweeping
#CVE-2017-5411: Use-after-free in Buffer Storage in libGLES
#CVE-2017-5409: File deletion via callback parameter in Mozilla Windows Updater and Maintenance Service
#CVE-2017-5408: Cross-origin reading of video captions in violation of CORS
#CVE-2017-5412: Buffer overflow read in SVG filters
#CVE-2017-5413: Segmentation fault during bidirectional operations
#CVE-2017-5414: File picker can choose incorrect default directory
#CVE-2017-5415: Addressbar spoofing through blob URL
#CVE-2017-5416: Null dereference crash in HttpChannel
#CVE-2017-5417: Addressbar spoofing by draging and dropping URLs
#CVE-2017-5425: Overly permissive Gecko Media Plugin sandbox regular expression access
#CVE-2017-5426: Gecko Media Plugin sandbox is not started if seccomp-bpf filter is running
#CVE-2017-5427: Non-existent chrome.manifest file loaded during startup
#CVE-2017-5418: Out of bounds read when parsing HTTP digest authorization responses
#CVE-2017-5419: Repeated authentication prompts lead to DOS attack
#CVE-2017-5420: Javascript: URLs can obfuscate addressbar location
#CVE-2017-5405: FTP response codes can cause use of uninitialized values for ports
#CVE-2017-5421: Print preview spoofing
#CVE-2017-5422: DOS attack by using view-source: protocol repeatedly in one hyperlink
#CVE-2017-5399: Memory safety bugs fixed in Firefox 52
#CVE-2017-5398: Memory safety bugs fixed in Firefox 52 and Firefox ESR 45.8
2017-03-07 21:45:43 +01:00
|
|
|
CONFIGURE_ENV+= CPP=${CPP}
|
2013-05-23 15:12:13 +02:00
|
|
|
|
2013-12-15 14:54:37 +01:00
|
|
|
# Build outside ${WRKSRC}
|
2014-06-22 10:56:08 +02:00
|
|
|
# Try to avoid conflict with config/makefiles/xpidl/Makefile.in
|
2013-12-15 14:54:37 +01:00
|
|
|
OBJDIR= ../build
|
|
|
|
|
CONFIGURE_DIRS= ${OBJDIR}
|
2013-12-26 14:12:05 +01:00
|
|
|
CONFIGURE_SCRIPT= ${WRKSRC}/configure
|
2013-12-15 14:54:37 +01:00
|
|
|
|
2016-12-06 09:14:22 +01:00
|
|
|
PLIST_VARS+= sps vorbis tremor glskia throwwrapper mozglue avx86
|
2013-08-29 16:14:34 +02:00
|
|
|
|
2013-09-21 22:35:46 +02:00
|
|
|
.include "../../mk/endian.mk"
|
2013-08-29 22:49:26 +02:00
|
|
|
.if ${MACHINE_ENDIAN} == "little"
|
2013-08-29 16:14:34 +02:00
|
|
|
PLIST.glskia= yes
|
|
|
|
|
.endif
|
2013-05-23 15:12:13 +02:00
|
|
|
|
2016-12-06 09:14:22 +01:00
|
|
|
.if ${MACHINE_ARCH} == "i386" || ${MACHINE_ARCH} == "x86_64"
|
|
|
|
|
PLIST.avx86= yes # see media/libav/README_MOZILLA: only used on x86
|
|
|
|
|
.endif
|
|
|
|
|
|
2013-08-29 20:48:25 +02:00
|
|
|
.if ${MACHINE_ARCH} != "sparc64"
|
|
|
|
|
# For some reasons the configure test for GCC bug 26905 still triggers on
|
|
|
|
|
# sparc64, which makes mozilla skip the installation of a few wrapper headers.
|
|
|
|
|
# Other archs end up with one additional file in the SDK headers
|
|
|
|
|
PLIST.throwwrapper= yes
|
|
|
|
|
.endif
|
|
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
.if !empty(MACHINE_PLATFORM:S/i386/x86/:MLinux-*-x86*)
|
|
|
|
|
PLIST.sps= yes
|
|
|
|
|
.endif
|
|
|
|
|
|
2014-05-05 22:47:14 +02:00
|
|
|
.if !empty(MACHINE_PLATFORM:MLinux-*-arm*)
|
2013-05-23 15:12:13 +02:00
|
|
|
PLIST.tremor= yes
|
|
|
|
|
.else
|
|
|
|
|
PLIST.vorbis= yes
|
|
|
|
|
.endif
|
|
|
|
|
|
2014-05-28 05:33:19 +02:00
|
|
|
# See ${WRKSRC}/mozglue/build/moz.build: libmozglue is built and
|
|
|
|
|
# installed as a shared library on these platforms.
|
|
|
|
|
.if ${OPSYS} == "Cygwin" || ${OPSYS} == "Darwin" # or Android
|
|
|
|
|
PLIST.mozglue= yes
|
|
|
|
|
.endif
|
|
|
|
|
|
2015-01-30 08:32:24 +01:00
|
|
|
# See ${WRKSRC}/security/sandbox/mac/Sandbox.mm: On Darwin, sandboxing
|
|
|
|
|
# support is only available when the toolkit is cairo-cocoa.
|
2016-02-26 11:57:45 +01:00
|
|
|
CONFIGURE_ARGS.Darwin+= --disable-sandbox
|
2015-01-30 08:32:24 +01:00
|
|
|
|
|
|
|
|
# See ${WRKSRC}/configure.in: It tries to use MacOS X 10.6 SDK by
|
|
|
|
|
# default, which is not always possible.
|
|
|
|
|
.if !empty(MACHINE_PLATFORM:MDarwin-8.*-*)
|
|
|
|
|
CONFIGURE_ARGS+= --enable-macos-target=10.4
|
|
|
|
|
.elif !empty(MACHINE_PLATFORM:MDarwin-9.*-*)
|
|
|
|
|
CONFIGURE_ARGS+= --enable-macos-target=10.5
|
|
|
|
|
.endif
|
|
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
# Makefiles sometimes call "rm -f" without more arguments. Kludge around ...
|
|
|
|
|
.PHONY: create-rm-wrapper
|
|
|
|
|
pre-configure: create-rm-wrapper
|
|
|
|
|
create-rm-wrapper:
|
|
|
|
|
printf '#!/bin/sh\n[ "$$*" = "-f" ] && exit 0\nexec /bin/rm $$@\n' > \
|
|
|
|
|
${WRAPPER_DIR}/bin/rm
|
|
|
|
|
chmod +x ${WRAPPER_DIR}/bin/rm
|
|
|
|
|
|
|
|
|
|
# The configure test for __thread succeeds, but later we end up with:
|
|
|
|
|
# dist/bin/libxul.so: undefined reference to `__tls_get_addr'
|
2016-02-26 11:57:45 +01:00
|
|
|
CONFIGURE_ENV.NetBSD+= ac_cv_thread_keyword=no
|
2013-05-23 15:12:13 +02:00
|
|
|
|
|
|
|
|
.if ${OPSYS} == "SunOS"
|
|
|
|
|
# native libbz2.so hides BZ2_crc32Table
|
|
|
|
|
PREFER.bzip2?= pkgsrc
|
|
|
|
|
.endif
|
|
|
|
|
|
2014-05-05 22:47:14 +02:00
|
|
|
.if ${OPSYS} == "OpenBSD"
|
|
|
|
|
PLIST_SUBST+= DLL_SUFFIX=".so.1.0"
|
|
|
|
|
.elif ${OPSYS} == "Darwin"
|
|
|
|
|
PLIST_SUBST+= DLL_SUFFIX=".dylib"
|
|
|
|
|
.else
|
|
|
|
|
PLIST_SUBST+= DLL_SUFFIX=".so"
|
|
|
|
|
.endif
|
|
|
|
|
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../archivers/bzip2/buildlink3.mk"
|
|
|
|
|
BUILDLINK_API_DEPENDS.libevent+= libevent>=1.1
|
|
|
|
|
.include "../../devel/libevent/buildlink3.mk"
|
|
|
|
|
.include "../../devel/libffi/buildlink3.mk"
|
Update to 62.0
Changelog:
New
Firefox Home (the default New Tab) now allows users to display up to
4 rows of top sites, Pocket stories, and highlights
"Reopen in Container" tab menu option appears for users with Containers
that lets them choose to reopen a tab in a different container
In advance of removing all trust for Symantec-issued certificates in
Firefox 63, a preference was added that allows users to distrust
certificates issued by Symantec. To use this preference, go to
about:config in the address bar and set the preference
"security.pki.distrust_ca_policy" to 2.
Added FreeBSD support for WebAuthn
Improved graphics rendering for Windows users without accelerated hardware
using Parallel-Off-Main-Thread Painting
Support for CSS Shapes, allowing for richer web page layouts. This goes
hand in hand with a brand new Shape Path Editor in the CSS inspector.
CSS Variable Fonts (OpenType Font Variations) support, which makes it
possible to create beautiful typography with a single font file
Updates for enterprise environments:
AutoConfig is sandboxed to the documented API by default. You
can disable the sandbox by setting the preference
general.config.sandbox_enabled to false. Our long term plan is to
remove the ability to turn off the sandboxing. If you need to
continue to use more complex AutoConfig scripts, you will need to use
Firefox Extended Support Release (ESR).
Added Canadian English (en-CA) locale
Changed
Removed the description field for bookmarks. Users who have stored
descriptions using the field may wish to export these descriptions
as html or json files, as they will be removed in a future release.
Dark theme is automatically enabled in macOS 10.14 dark mode
Changed the default setting to Enforce (3) for the
security.pki.name_matching_mode preference
Adobe Flash applets now run in a more secure mode using process
sandboxing on macOS. Learn how this may affect features here.
Users disconnecting from Sync are now offered the option to wipe
their Firefox profile data (including bookmarks, passwords, history,
cookies, and site data) from their desktop computer
Changed how WebRTC handles screen sharing: When screen-sharing a window,
the window will be brought to front
Developer
Three-pane Inspector in Developer Tools separates the rules into its own
panel
2018-09-05 17:29:58 +02:00
|
|
|
BUILDLINK_API_DEPENDS.nspr+= nspr>=4.19
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../devel/nspr/buildlink3.mk"
|
2013-09-19 14:37:49 +02:00
|
|
|
.include "../../textproc/icu/buildlink3.mk"
|
2018-12-12 15:08:50 +01:00
|
|
|
BUILDLINK_API_DEPENDS.nss+= nss>=3.40.1
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../devel/nss/buildlink3.mk"
|
|
|
|
|
.include "../../devel/zlib/buildlink3.mk"
|
2018-11-04 01:38:44 +01:00
|
|
|
#.include "../../mk/jpeg.buildlink3.mk"
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../graphics/MesaLib/buildlink3.mk"
|
2018-03-17 01:59:02 +01:00
|
|
|
#BUILDLINK_API_DEPENDS.cairo+= cairo>=1.10.2nb4
|
|
|
|
|
#.include "../../graphics/cairo/buildlink3.mk"
|
2017-10-29 10:47:57 +01:00
|
|
|
BUILDLINK_DEPMETHOD.clang= build
|
2018-11-04 01:38:44 +01:00
|
|
|
BUILDLINK_API_DEPENDS.clang+= clang>=6.0.1nb1
|
2017-09-30 07:34:11 +02:00
|
|
|
.include "../../lang/clang/buildlink3.mk"
|
2017-10-29 10:47:57 +01:00
|
|
|
BUILDLINK_DEPMETHOD.rust= build
|
2018-11-04 01:38:44 +01:00
|
|
|
BUILDLINK_API_DEPENDS.rust+= rust>=1.24.0
|
2017-09-30 07:34:11 +02:00
|
|
|
.include "../../lang/rust/buildlink3.mk"
|
2014-06-17 15:06:09 +02:00
|
|
|
BUILDLINK_API_DEPENDS.libvpx+= libvpx>=1.3.0
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../multimedia/libvpx/buildlink3.mk"
|
|
|
|
|
.include "../../net/libIDL/buildlink3.mk"
|
2017-04-27 03:49:47 +02:00
|
|
|
# textproc/hunspell 1.3 is too old
|
|
|
|
|
#.include "../../textproc/hunspell/buildlink3.mk"
|
2018-07-16 04:03:15 +02:00
|
|
|
.include "../../multimedia/ffmpeg4/buildlink3.mk"
|
2013-05-23 15:12:13 +02:00
|
|
|
.include "../../x11/libXt/buildlink3.mk"
|
2014-05-05 02:52:10 +02:00
|
|
|
BUILDLINK_API_DEPENDS.pixman+= pixman>=0.25.2
|
|
|
|
|
.include "../../x11/pixman/buildlink3.mk"
|
2017-12-10 01:45:09 +01:00
|
|
|
.include "../../x11/gtk2/buildlink3.mk"
|
|
|
|
|
.include "../../x11/gtk3/buildlink3.mk"
|
2018-06-29 14:51:55 +02:00
|
|
|
.include "../../lang/python/pyversion.mk"
|
