Moonchild
4d5b1cc5d8
Merge branch 'nss-3.125-port'
2026-07-28 10:50:50 +02:00
Moonchild
0e521f6302
Bump NSS (UXP) patch level.
2026-07-28 10:10:27 +02:00
Moonchild
9cacfcff57
Merge remote-tracking branch 'dbsoft/flex-button-fix2'
2026-07-28 10:08:00 +02:00
John Schanck
21ad7adc90
Bug 2043887 - guard against integer overflow in CERT_Hexify.
2026-07-28 10:03:44 +02:00
Benjamin Beurdouche
9a29430751
Bug 2027353 - clamp input.len to testString size in pk11_mergeSecretKey.
2026-07-28 09:59:51 +02:00
Benjamin Beurdouche
481d4868b0
Bug 2029433 - Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey.
2026-07-28 09:57:10 +02:00
Anna Weine
d148c11717
Bug 2028954 - CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing.
2026-07-28 09:53:26 +02:00
Moonchild
bc322e58f8
Bug 2027364 - Set tail pointer to null in static slot lists when deallocating.
2026-07-28 09:22:56 +02:00
John Schanck
e48a6f26a5
Bug 2032110 - fix two integer overflows on LLP64 systems.
2026-07-27 23:58:14 +02:00
John Schanck
d85edd01df
Bug 2030102 - avoid leaving a dangling ss->sec.ci.sid on allocation failure.
2026-07-27 23:49:55 +02:00
Maurice Dauer
296379d751
Bug 2027325 - Reject empty nickname in PK11_TraverseCertsForNicknameInSlot.
2026-07-27 23:46:32 +02:00
Moonchild
7ba9fc2801
Bug 2030563 - Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib.
2026-07-27 23:22:58 +02:00
Brian Smith
a9ac8b390f
Issue #3153 - Make sure buttons report a definite size for flex containers.
...
Second try, this time ONLY do it for flex container or grids.
This should prevent layout problems in non-flex scenarios.
2026-07-27 12:36:24 -05:00
Benjamin Beurdouche
71c0f8246c
Bug 2029807 - Guard padding read against empty output in SEC_PKCS7DecryptContents.
2026-07-27 19:12:42 +02:00
Benjamin Beurdouche
6cda35442f
Bug 2027346 - validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen.
2026-07-27 19:05:33 +02:00
Benjamin Beurdouche
1dba423327
Bug 2027371 - rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow.
2026-07-27 18:56:08 +02:00
Benjamin Beurdouche
e2af0b28bf
Bug 2027373 - guard space subtraction in ssl_CallCustomExtensionSenders.
2026-07-27 18:51:32 +02:00
Benjamin Beurdouche
5ea9b7b80a
Bug 2029901 - Guard against keySize overflow in IKE PRF/PRF+ output sizing.
2026-07-27 18:44:55 +02:00
Benjamin Beurdouche
b799e100ad
Bug 2027362 - bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity.
2026-07-27 18:39:10 +02:00
Benjamin Beurdouche
1c500a6abb
Bug 2027349 - reject empty nickname in PK11_TraverseCertsForNicknameInSlot.
2026-07-27 18:27:47 +02:00
Moonchild
b909fccc92
Revert "Issue #3153 - Make sure buttons report a definite size for flex containers."
...
This reverts commit 3e223cbfb4 .
2026-07-27 17:59:43 +02:00
Moonchild
abddee43b4
Merge remote-tracking branch 'dbsoft/flex-button-fix'
2026-07-27 14:41:27 +02:00
Moonchild
49d184e550
[network] Fix CacheEntry::mDoomCallback data race.
2026-07-27 14:32:51 +02:00
Brian Smith
3e223cbfb4
Issue #3153 - Make sure buttons report a definite size for flex containers.
2026-07-27 05:38:09 -05:00
Moonchild
dd9099a7d3
[layout] Fix nsFrameSetFrame primary frame handling of replicated children.
2026-07-26 19:55:49 +02:00
Moonchild
31558a1521
Merge pull request 'Issue #3061 Follow-up: Remove network tickler prefs' ( #3151 ) from Shadow/UXP-contrib:contrib into master
...
Reviewed-on: https://repo.palemoon.org/MoonchildProductions/UXP/pulls/3151
2026-07-26 15:45:08 +00:00
Shadow
0e683bf699
Issue #3061 Follow-up: Remove network tickler prefs
2026-07-26 15:39:39 +00:00
Moonchild
6459dec5bb
[DOM media] Perform more thorough checks on video regions.
2026-07-26 15:04:18 +02:00
az
0e930fba3f
Bug 2045742
2026-07-26 10:08:13 +02:00
Moonchild
3b683bbe59
Merge pull request 'Align aspect-ratio to spec' ( #3150 ) from Basilisk-Dev/UXP-contrib:css-aspect-ratio into master
...
Reviewed-on: https://repo.palemoon.org/MoonchildProductions/UXP/pulls/3150
2026-07-26 07:06:00 +00:00
Basilisk-Dev
0042e54c38
Issue #2404 - Split aspect ratio enum types into a separate header to fix compilation issues
2026-07-25 12:24:15 -04:00
Andrew McCreight
e75201f7d1
Bug 2049523 - Make ToJSValue for float consistent with double.
2026-07-25 17:04:14 +02:00
Moonchild
28c47723b2
Fix comment (nit)
2026-07-25 16:12:08 +02:00
Randell Jesup
3d872ff7b0
Bug 2029734: Flush before calling sctp_process_init()
2026-07-25 14:52:29 +02:00
Moonchild
beb684c29e
No issue - Use strnlen instead of strnlen_s.
...
Apparently, GCC doesn't like the _s variants.
2026-07-25 13:08:15 +02:00
Moonchild
775588b75d
[image] Make sure the image was fully and cleanly decoded before finalizing its animation state as complete.
2026-07-25 10:01:55 +02:00
Basilisk-Dev
8a2a5d837c
Issue #2404 - Fix aspect ratio sizing for grid items
2026-07-25 00:58:20 -04:00
Basilisk-Dev
8add755c81
Issue #2404 - Improvements to CSS aspect-ratio spec compliance
2026-07-25 00:57:58 -04:00
Moonchild
257c64567e
[parser] Associate image elements with form only if the form and the intended parent are in the same tree.
2026-07-24 21:12:04 +02:00
Moonchild
d0b61d4a68
No issue - CallUpdateWindow is [[nodiscard]], but we don't need to use
...
the result here.
2026-07-24 19:29:00 +02:00
Moonchild
3b5f50cc35
Merge pull request 'No Issue - Remove the half-life experiment in HTTP cache' ( #3149 ) from Shadow/UXP-contrib:master into master
...
Reviewed-on: https://repo.palemoon.org/MoonchildProductions/UXP/pulls/3149
2026-07-24 14:32:21 +00:00
Moonchild
27c6a7f477
[DOM media] Stop accepting audio samples with too low sample rates.
...
This sets the floor to 8kHz audio, which is generally considered to be
the lowest acceptable "phone quality"/"walkie-talkie" audio rate.
Audio outside the range will refuse to decode after this commit and give
a console error.
This avoids a whole class of potential bugs.
2026-07-24 14:52:40 +02:00
Moonchild
c65f84214e
[layout] Add corner-case correctness check in DottedCornerFinder::FindBestOverlap.
2026-07-24 13:17:54 +02:00
Moonchild
a317c65fd7
[network] Add usrsctp TSN gap check.
2026-07-24 12:58:20 +02:00
Shadow
0ec35ce534
No Issue - Remove the half-life experiment in HTTP cache
...
Reviewed-on: https://repo.palemoon.org/Shadow/UXP-contrib/pulls/1
2026-07-24 09:49:48 +00:00
Moonchild
bf0c040722
[js] Clamp length of regexp captures array for dollar substitution.
2026-07-22 22:37:50 +02:00
Moonchild
ebadd51401
[js] Initialize BaselineFrame return value slot in OnLeaveBaselineFrame.
2026-07-22 20:26:07 +02:00
Moonchild
5ed0bf8b44
[DOM] Make parser update form owner properly
2026-07-22 17:12:32 +02:00
Moonchild
f877c1dba5
[gfx] Hold a strong ref during GetFontAt lookup.
2026-07-22 10:27:53 +02:00
Moonchild
4c14f8f89b
[gfx] Add bounds checks and limit reverse scanning of ligature data.
2026-07-22 09:43:54 +02:00