changes:
-fix some security problems (CVE-2010-4492, CVE-2010-4493, CVE-2011-0482,
CVE-2010-4199, CVE-2010-4578)
-fix some crashes (which were partly patched in pkgsrc before)
This release has essentially security fixes, covering the following
CVEs:
CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206
CVE-2010-1791 CVE-2010-3812 CVE-2010-3813
(plus 2 patches from upstream which fix crashes)
alternative from mk/jpeg.buildlink3.mk
This allows selection of an alternative jpeg library (namely the x86 MMX,
SSE, SSE2 accelerated libjpeg-turbo) via JPEG_DEFAULT=libjpeg-turbo, and
follows the current standard model for alternatives (fam, motif, fuse etc).
The mechanical edits were applied via the following script:
#!/bin/sh
for d in */*; do
[ -d "$d" ] || continue
for i in "$d/"Makefile* "$d/"*.mk; do
case "$i" in *.orig|*"*"*) continue;; esac
out="$d/x"
sed -e 's;graphics/jpeg/buildlink3\.mk;mk/jpeg.buildlink3.mk;g' \
-e 's;BUILDLINK_PREFIX\.jpeg;JPEGBASE;g' \
< "$i" > "$out"
if cmp -s "$i" "$out"; then
rm -f "$out"
else
echo "Edited $i"
mv -f "$i" "$i.orig" && mv "$out" "$i"
fi
done
done
changes:
The patches to fix the following CVEs are included with help from
Vincent Danen and other members of the Red Hat security team:
CVE-2010-1781 CVE-2010-1782 CVE-2010-1784 CVE-2010-1785
CVE-2010-1786 CVE-2010-1787 CVE-2010-1788 CVE-2010-1790
CVE-2010-1792 CVE-2010-1793 CVE-2010-2648
Changes:
- We found out that WebKitWebHistoryItems were being kept with a
reference count of 2 instead of 1 as they should; nobody should be
relying on that, but if you hit reference counting problems with
items you were creating yourself, this is for you.
- You can now copy images from the web page to the clipboard.
- Improvements were made to the Plugin handling code.
- Scroll events will now be correctly reported to web applications.
- You can now embed arbitrary widgets as if it was a plugin, with
the new "create-plugin-widget" signal.
- The atk_text_get_text_{at,after,before}_offset methods are now
implemented for all boundary types except LINE_AFTER and
LINE_BEFORE.
- The usual stream of minor fixes and improvements, as always.
Changes:
- Do not handle KeyEvents with Ctrl or Alt modifiers that we
otherwise know nothing about. Otherwise shortcuts defined in the
WebView will never be executed.
- Add information about the SVG index bounds check committed in r43590.
- For paste from middle button (button==2) we want to use
the GDK_PRIMARY_SELECTION. Implement the new getCurrentTarget
method in PasteboardHelperGtk by asking the WebView which
clipboard to use.
- Add glib-2.0 to the list of required package.
- (test_webkit_web_frame_create_destroy): Declare webView as a GtkWidget*
to fix pointer type incompatibility warnings.
- Make the scan program call g_thread_init(NULL) in addition to
g_type_init(), so that it actually works.
- Unify scrolling code via adjustments and keys. Use the WebCore
defined constants, since that's what people are most used to at
this point.
- Add missing call to notifyStatus in the committed case and a
missing property notify.
- When a download is requested by an ongoing request, use the already
provided response to set the suggested filename for the WebKitDownload
object, if available.
- Remove bogus extern "C" from some source files.
- Misc fixes to InspectorClientGtk: use g_filename_to_uri to
get the URI and use web_view_load_uri instead of the deprecated
web_view_open method for loading the URI.
- Add #if ENABLE(DATABASE) guards around database code so toggling
ENABLE_DATABASE off does not break builds.
- Implement load-status and progress properties on the view, as well as
load-status on the frame. This supersedes the different load signals
load-progress-changed, load-committed, load-done, load-started and
load-finished which are not only misnamed but broken by design.
- Fix memory leaks.
- Use strlen instead of g_utf8_strlen when calculating the size of
the data that is being given to webkit_web_frame_load_string to be
loaded, so that we don't miss any of the content.
- Fix mis-applied patch.
- Add a FrameLoaderClient callback for ResourceRetrievedByXMLHttpRequest.
- Provide a mechanism to create a quirks delegate for HTMLParser
- Add MessageSource and MessageLevel parameters to
ChromeClient::addMessageToConsole.
Changes:
- Several ATK support additions and fixes got landed, with many
roles being now implemented, providing better accessibility.
- Caret browsing is now available.
- Spelling check has been implemented using Enchant; the API is
still lacking, and some of the functionality still needs to be
improved, though.
- Error reporting is now available, with default error pages, and
API that allows the application to override the default behavior;
localization of those pages is still not supported, but planned.
- More crashes and other bugs fixed.
This changes the buildlink3.mk files to use an include guard for the
recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS,
BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new
variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of
enter/exit marker, which can be used to reconstruct the tree and
to determine first level includes. Avoiding := for large variables
(BUILDLINK_ORDER) speeds up parse time as += has linear complexity.
The include guard reduces system time by avoiding reading files over and
over again. For complex packages this reduces both %user and %sys time to
half of the former time.
2009-03-15 Xan Lopez <xlopez@igalia.com>
Bump version to 1.1.3 for release and fix soversion
calculation (oops). Thanks to Frederik Himpe for pointing this
out.
* configure.ac:
2009-03-15 Xan Lopez <xlopez@igalia.com>
Bump version and libtool version for release.
* configure.ac:
2009-03-14 Xan Lopez <xlopez@igalia.com>
No review, build fix.
Split clean rules to make distcheck pass.
* GNUmakefile.am:
2009-03-13 Mark Rowe <mrowe@apple.com>
Reviewed by Dan Bernstein.
Remove rarely used Makefile targets from the Makefile.
There are many situations in which the targets don't work as expected,
and their primary use is addressed by having the build system default
to building the appropriate architecture.
* Makefile.shared:
2009-03-11 Jan Michael Alonzo <jmalonzo@webkit.org>
Reviewed by Holger Freyther.
[Gtk] Fix make clean targets
https://bugs.webkit.org/show_bug.cgi?id=24450
Fix 'make' clean targets. We shouldn't be removing DerivedSources
if it's only clean. Only remove it if it's distclean or
maintainer-clean. Also remove build-related auxillary files on
dist/maintainer clean.
* GNUmakefile.am:
2009-03-11 Jan Michael Alonzo <jmalonzo@webkit.org>
Reviewed by Holger Freyther
[GTK]DumpRenderTree doesn't compile for non-X11 GTK ports anymore
https://bugs.webkit.org/show_bug.cgi?id=2260
pangoft2 is also used in directfb builds so use it for all targets
* configure.ac:
2009-03-02 Xan Lopez <xan@gnome.org>
Reviewed by Mark Rowe.
https://bugs.webkit.org/show_bug.cgi?id=24287
[GTK] Move auth dialog feature to WebKit/
Add WebKitSoupAuthDialog files to build.
* GNUmakefile.am:
2009-03-03 Gustavo Noronha Silva <gns@gnome.org>
Reviewed by Alexey Proskuryakov.
https://bugs.webkit.org/show_bug.cgi?id=16826
[Gtk] Implement WebKitDownload
Adding new files related to WebKitDownload to the GTK+ port.
* GNUmakefile.am:
2009-03-02 Gustavo Noronha Silva <gns@gnome.org>
Unreviewed build fix; adding missing files to EXTRA_DIST, so that
they show up in the tarball.
* GNUmakefile.am:
2009-03-01 Christian Dywan <christian@twotoasts.de>
* configure.ac: Bump GTK port version to 1.1.1.
2009-02-27 Gustavo Noronha Silva <gns@gnome.org>
Unreviewed build fix. Adding the WebKit/gtk/webkitmarshal.list
file to EXTRA_DIST to fix make dist.
* GNUmakefile.am:
2009-02-26 Xan Lopez <xan@gnome.org>
Reviewed by Holger Freyther.
https://bugs.webkit.org/show_bug.cgi?id=16947
[GTK] Missing HTTP Auth challenge
Add HTTP authentication dialog with optional GNOME Keyring
storage.
* GNUmakefile.am:
* configure.ac:
2009-02-26 Xan Lopez <xan@gnome.org>
Reviewed by Holger Freyther.
https://bugs.webkit.org/show_bug.cgi?id=16947
[GTK] Missing HTTP Auth challenge
Take marshallers to be built from a manually maintained list
instead of grepping the sources.
It's much faster, especially so now that we want to add
marshallers from WebCore too. A system to only take into account
the modified files when generating the marshallers from sources
could be hacked, but I think it's overkill considering how rarely
a new marshaller is added.
* GNUmakefile.am:
2009-02-24 Jan Michael Alonzo <jmalonzo@webkit.org>
Reviewed by Alexey Proskuryakov.
[Gtk] add options for 3D transforms and HTML5 channel messaging to the build
https://bugs.webkit.org/show_bug.cgi?id=24072
Add options for toggling 3D transforms and HTML5 channel messaging
support on or off.
Also fix the web-workers option. It should be web-workers and not workers.
* configure.ac:
2009-02-23 Xan Lopez <xan@gnome.org>
Reviewed by Alexey Proskuryakov.
https://bugs.webkit.org/show_bug.cgi?id=22624
[SOUP][GTK] Need API to get SoupSession from WebKit.
Remove CURL support, the only supported HTTP backend is SOUP now.
* GNUmakefile.am:
* configure.ac:
2009-02-19 Christian Dywan <christian@twotoasts.de>
Rubber-stamped by Holger Freyther.
http://bugs.webkit.org/show_bug.cgi?id=22811
Underlinking in Programs_UnitTests (GTK+ build)
* GNUmakefile.am: Add GLIB_LIBS to unit test library flags.
2009-02-18 Gustavo Noronha Silva <gns@gnome.org>
Reviewed by Holger Freyther.
Fix symbols.filter location, and add other missing files to the
autotools build, so that make dist works.
* GNUmakefile.am:
2009-02-17 Gustavo Noronha Silva <gns@gnome.org>
Reviewed by Alexey Proskuryakov.
https://bugs.webkit.org/show_bug.cgi?id=23939
Release build being built with debugging symbols
* configure.ac: Revert change done in revision 40790, since we
already have a AC_PROG_CXX macro call as part of WEBKIT_INIT
2009-02-12 Gustavo Noronha Silva <gns@gnome.org>
Reviewed by Eric Seidel.
* configure.ac: Make soup the default HTTP backend for the Gtk port.
2009-02-09 Calvin Walton <calvin.walton@gmail.com>
Reviewed by Holger Freyther.
https://bugs.webkit.org/show_bug.cgi?id=23823
[Gtk] Fix build with recent autotools
Current versions of automake/libtool don't assume you want C++ enabled
by default any more, so explicitly check for a C++ compiler.
* configure.ac: Add AC_PROG_CXX macro
2009-02-02 Christian Dywan <christian@twotoasts.de>
Rubber-stamped by Holger Freyther.
Don't require Geolocation by default.
* configure.ac:
2009-01-30 Jan Michael Alonzo <jmalonzo@webkit.org>
Reviewed by Nikolas Zimmermann.
[Gtk] Refactor autoconf/configure.ac in preparation for jsc and webkit build splits
https://bugs.webkit.org/show_bug.cgi?id=22136
* GNUmakefile.am:
* acinclude.m4: Removed.
* autogen.sh:
* autotools/acinclude.m4: Added.
* autotools/dolt.m4: Added.
* autotools/symbols.filter: Renamed from symbols.filter.
* autotools/webkit.m4: Added.
* configure.ac:
2009-01-30 Holger Hans Peter Freyther <zecke@selfish.org>
Reviewed by Nikolas Zimmermann.
[GTK] Implement GeolocationService using the Geoclue library
https://bugs.webkit.org/show_bug.cgi?id=22022
Untested implementation of the GeolocationService using the geoclue
library. Velocity handling is completely missing and the accuracy
handling might be wrong.
* GNUmakefile.am:
* configure.ac:
2009-01-11 Xan Lopez <xan@gnome.org>
Reviewed by Holger Freyther.
Bump version to 1.1.0 since we are breaking ABI and adding new
major features.
* configure.ac:
2008-12-19 Marco Barisione <marco.barisione@collabora.co.uk>
Reviewed by Holger Freyther.
http://bugs.webkit.org/show_bug.cgi?id=16562
[gtk] Implement WebPolicyDelegate methods
Original work by Pierre-Luc Beaudoin. Final touches by Gustavo
Noronha.
This implements the delegates methods of WebPolicyDelegate.
Since Gtk+/C doesn't have delegate methods, they are replaced with
signals.
A new object WebKitWebPolicyDecision allows the browser to delay its
response in certain cases. WebKitWebNavigationAction contains the
information about what caused a navigation request.
* GNUmakefile.am: Add new files
2008-12-19 Gustavo Noronha Silva <gns@gnome.org>
Reviewed by Holger Freyther.
Use ustar tar format for WebKit/GTK+'s make dist target, so that
storing files whose filenames are > 99 is possible.
* configure.ac:
2008-12-19 Holger Hans Peter Freyther <zecke@selfish.org>
[GTK] Build fix by defining WTF_USE_JIT_STUB_ARGUMENT_VA_LIST
Fix the jit compilation on i*686 on Linux by using the va_list
to pass arguments to the CTI. This is done on the MAC as well
and sunspider and javascriptcore seem to work with that.
* configure.ac:
2008-12-18 Pamela Greene <pam@chromium.org>
Submitted without review.
Right, remove the whole misplaced directory, not just the tests.
* fast: Removed.
* fast/dom: Removed.
2008-12-18 Pamela Greene <pam@chromium.org>
Submitted without review.
Moving layout test into LayoutTests where it belongs.
* fast/dom/setter-type-enforcement-expected.txt: Removed.
* fast/dom/setter-type-enforcement.html: Removed.
2008-12-15 Daniel Macks <dmacks@netspace.org>
Reviewed by Darin Adler.
Default to use external libicu-config if avail on all platforms.
https://bugs.webkit.org/show_bug.cgi?id=22713
* configure.ac:
WebKit is an open source web browser engine. WebKit is also the name of
the Mac OS X system framework version of the engine that's used by
Safari, Dashboard, Mail, and many other OS X applications. WebKit's HTML
and JavaScript code began as a branch of the KHTML and KJS libraries
from KDE.
This is the GTK2+ port of the engine.
