Subject: CVS commit: pkgsrc/www/firefox
From: Ryo ONODERA
Date: 2016-08-06 10:46:59
Message id: 20160806084659.AC5E9FBB5@cvs.NetBSD.org

Log Message:
Update to 48.0

* OSS audio support may not work. I will revisit later

Changelog:
New:
    Roar for moar protection against harmful downloads! We've got your back

    Process separation (e10s) is enabled for some of you. Like it? Let us know \ 
and we'll roll it out to more.

    Add-ons that have not been verified and signed by Mozilla will not load

    GNU/Linux fans: Get better Canvas performance with speedy Skia support. Try \ 
saying that three times fast

    WebRTC embetterments:
        Delay-agnostic AEC enabled
        Full duplex for GNU/Linux enabled
        ICE Restart & Update is supported
        Cloning of MediaStream and MediaStreamTrack is now supported

    Searching for something already in your bookmarks or open tabs? We added \ 
super smart icons to let you know

    Windows folks: Tab (move buttons) and Shift+F10 (pop-up menus) now behave as \ 
they should in Firefox customization mode

    The media parser has been redeveloped using the Rust programming language

    Windows 7 systems without Platform Update can now use D3D11 WARP

Fixed:
    Various security fixes

    Heyo, Jabra & Logitech C920 webcam users. We fixed those pesky WebRTC \ 
bugs causing frequency distortions. Buh-bye, squeaky voice!

    Improved step debugging on last line of functions

Changed:
    Starting with the Firefox version 49 release, so long to support for 10.6, \ 
10.7 and 10.8. Now we can focus on where most Mac users are: 10.9. Don't forget \ 
to upgrade!

    After version 48, SSE2 CPU extensions are going to be required on Windows

    Au revoir to Windows Remote Access Service modem Autodial

Developer:
    WebExtensions support is now considered as stable

    Workers can now use the Web Crypto API

    Want to move absolute & fixed positioned elements? (Who doesn't, right?) \ 
Now you can with our geometry editor.

    The memory tool now has a tree map view for your debugging pleasure. It's a \ 
little bit of "boo" and a whole lot of "ya."

    We're putting the spotlight on the background. Now you can debug \ 
WebExtensions background content scripts and background pages

    Content Security Policy (CSP) is now enforced for WebExtensions. (Who's down \ 
with CSP?)

    Old and busted: Error Console. New hotness: Browser Console for your \ 
debugging pleasure.

    Add-on development just got easier because you can reload them from \ 
about:debugging — because we're all about debugging.

    This theme is hot, hot, hot! Say hi to the Firebug theme for Developer Tools.

    Expand network requests from the console panel to view request details in \ 
line, so you can see things in context

Fixed in Firefox 48:
    2016-84 Information disclosure through Resource Timing API during page navigation
    2016-83 Spoofing attack through text injection into internal error pages
    2016-82 Addressbar spoofing with right-to-left characters on Firefox for Android
    2016-81 Information disclosure and local file manipulation through drag and drop
    2016-80 Same-origin policy violation using local HTML file and saved \ 
shortcut file
    2016-79 Use-after-free when applying SVG effects
    2016-78 Type confusion in display transformation
    2016-77 Buffer overflow in ClearKey Content Decryption Module (CDM) during \ 
video playback
    2016-76 Scripts on marquee tag can execute in sandboxed iframes
    2016-75 Integer overflow in WebSockets during data buffering
    2016-74 Form input type change from password to text can store plain text \ 
password in session restore file
    2016-73 Use-after-free in service workers with nested sync events
    2016-72 Use-after-free in DTLS during WebRTC session shutdown
    2016-71 Crash in incremental garbage collection in JavaScript
    2016-70 Use-after-free when using alt key and toplevel menus
    2016-69 Arbitrary file manipulation by local user through Mozilla updater \ 
and callback application path parameter
    2016-68 Out-of-bounds read during XML parsing in Expat library
    2016-67 Stack underflow during 2D graphics rendering
    2016-66 Location bar spoofing via data URLs with malformed/invalid mediatypes
    2016-65 Cairo rendering crash due to memory allocation issue with FFmpeg 0.10
    2016-64 Buffer overflow rendering SVG with bidirectional content
    2016-63 Favicon network connection can persist when page is closed
    2016-62 Miscellaneous memory safety hazards (rv:48.0 / rv:45.3)

Files:
RevisionActionfile
1.263modifypkgsrc/www/firefox/Makefile
1.108modifypkgsrc/www/firefox/PLIST
1.250modifypkgsrc/www/firefox/distinfo
1.80modifypkgsrc/www/firefox/mozilla-common.mk
1.31modifypkgsrc/www/firefox/options.mk
1.47modifypkgsrc/www/firefox/patches/patch-aa
1.20modifypkgsrc/www/firefox/patches/patch-as
1.7modifypkgsrc/www/firefox/patches/patch-config_Makefile.in
1.13modifypkgsrc/www/firefox/patches/patch-config_external_moz.build
1.20modifypkgsrc/www/firefox/patches/patch-config_system-headers
1.5modifypkgsrc/www/firefox/patches/patch-dom_media_moz.build
1.5modifypkgsrc/www/firefox/patches/patch-ipc_chromium_src_base_process__util__bsd.cc
1.2modifypkgsrc/www/firefox/patches/patch-js_src_jit_AtomicOperations.h
1.9modifypkgsrc/www/firefox/patches/patch-media_libcubeb_src_moz.build
1.7modifypkgsrc/www/firefox/patches/patch-media_libtheora_moz.build
1.2modifypkgsrc/www/firefox/patches/patch-media_libtremor_Makefile.in
1.3modifypkgsrc/www/firefox/patches/patch-media_libtremor_moz.build
1.2modifypkgsrc/www/firefox/patches/patch-media_libvorbis_Makefile.in
1.3modifypkgsrc/www/firefox/patches/patch-media_libvorbis_moz.build
1.7modifypkgsrc/www/firefox/patches/patch-mfbt_Attributes.h
1.5modifypkgsrc/www/firefox/patches/patch-modules_libpref_init_all.js
1.3modifypkgsrc/www/firefox/patches/patch-toolkit_components_protobuf_src_google_protobuf_stubs_atomicops.h
1.7modifypkgsrc/www/firefox/patches/patch-toolkit_library_moz.build
1.1addpkgsrc/www/firefox/patches/patch-build_moz.configure_old.configure
1.1addpkgsrc/www/firefox/patches/patch-python_mozbuild_mozbuild_configure_options.py
1.5removepkgsrc/www/firefox/patches/patch-js_src_jsmath.cpp