From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id 677D2139085 for ; Sun, 8 Jan 2017 21:42:07 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C6055E0C86; Sun, 8 Jan 2017 21:42:06 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [IPv6:2001:470:ea4a:1:5054:ff:fec7:86e4]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 9525FE0C86 for ; Sun, 8 Jan 2017 21:42:06 +0000 (UTC) Received: from oystercatcher.gentoo.org (unknown [IPv6:2a01:4f8:202:4333:225:90ff:fed9:fc84]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.gentoo.org (Postfix) with ESMTPS id 0A33A340A23 for ; Sun, 8 Jan 2017 21:42:05 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by oystercatcher.gentoo.org (Postfix) with ESMTP id 5E3BC261C for ; Sun, 8 Jan 2017 21:42:03 +0000 (UTC) From: "Jory Pratt" To: gentoo-commits@lists.gentoo.org Content-Transfer-Encoding: 8bit Content-type: text/plain; charset=UTF-8 Reply-To: gentoo-dev@lists.gentoo.org, "Jory Pratt" Message-ID: <1483911626.7792f12a30bf5c99ed3348ec2eb4b8f53375c5d8.anarchy@gentoo> Subject: [gentoo-commits] repo/gentoo:master commit in: www-client/firefox/files/, www-client/firefox/ X-VCS-Repository: repo/gentoo X-VCS-Files: www-client/firefox/files/mozilla_configure_regexp.patch www-client/firefox/files/mozilla_configure_regexp_esr.patch www-client/firefox/files/update_h2_curve.patch www-client/firefox/firefox-45.6.0-r1.ebuild www-client/firefox/firefox-45.6.0.ebuild www-client/firefox/firefox-50.1.0-r1.ebuild www-client/firefox/firefox-50.1.0.ebuild X-VCS-Directories: www-client/firefox/files/ www-client/firefox/ X-VCS-Committer: anarchy X-VCS-Committer-Name: Jory Pratt X-VCS-Revision: 7792f12a30bf5c99ed3348ec2eb4b8f53375c5d8 X-VCS-Branch: master Date: Sun, 8 Jan 2017 21:42:03 +0000 (UTC) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-commits@lists.gentoo.org X-Archives-Salt: 7faf007d-4a9e-429d-a811-3a9fb58ae80e X-Archives-Hash: cb93ba2fb47cbf4ceed0e6990fd0d45d commit: 7792f12a30bf5c99ed3348ec2eb4b8f53375c5d8 Author: Jory A. Pratt gentoo org> AuthorDate: Sun Jan 8 21:32:39 2017 +0000 Commit: Jory Pratt gentoo org> CommitDate: Sun Jan 8 21:40:26 2017 +0000 URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=7792f12a www-client/firefox - Fix sed-4.3 support, add support for >=nss-3.28 .../firefox/files/mozilla_configure_regexp.patch | 22 +++++++++++++++ .../files/mozilla_configure_regexp_esr.patch | 32 ++++++++++++++++++++++ www-client/firefox/files/update_h2_curve.patch | 30 ++++++++++++++++++++ ...efox-45.6.0.ebuild => firefox-45.6.0-r1.ebuild} | 4 ++- ...efox-50.1.0.ebuild => firefox-50.1.0-r1.ebuild} | 2 ++ 5 files changed, 89 insertions(+), 1 deletion(-) diff --git a/www-client/firefox/files/mozilla_configure_regexp.patch b/www-client/firefox/files/mozilla_configure_regexp.patch new file mode 100644 index 00000000..f35e445 --- /dev/null +++ b/www-client/firefox/files/mozilla_configure_regexp.patch @@ -0,0 +1,22 @@ +From: Jory A. Pratt + +Note: the first occurrence of :space: is [:space:] (with a single pair +of []), where it should be [[:space:]] (with two pairs of []). + +This causes the sed command to fail (with the error message quoted in +my original report), driving to failure the whole configure step. + +https://bugzilla.mozilla.org/show_bug.cgi?id=1329252 + +diff --git a/build/autoconf/icu.m4 b/build/autoconf/icu.m4 +--- a/build/autoconf/icu.m4 ++++ b/build/autoconf/icu.m4 +@@ -70,7 +70,7 @@ + fi + fi + +- version=`sed -n 's/^[[:space:]]*#[[:space:]]*define[[:space:]][[:space:]]*U_ICU_VERSION_MAJOR_NUM[[:space:]][[:space:]]*\([0-9][0-9]*\)[[:space:]]*$/\1/p' "$icudir/common/unicode/uvernum.h"` ++ version=`sed -n 's/^[[[:space:]]]*#[[:space:]]*define[[:space:]][[:space:]]*U_ICU_VERSION_MAJOR_NUM[[:space:]][[:space:]]*\([0-9][0-9]*\)[[:space:]]*$/\1/p' "$icudir/common/unicode/uvernum.h"` + if test x"$version" = x; then + AC_MSG_ERROR([cannot determine icu version number from uvernum.h header file $lineno]) + fi \ No newline at end of file diff --git a/www-client/firefox/files/mozilla_configure_regexp_esr.patch b/www-client/firefox/files/mozilla_configure_regexp_esr.patch new file mode 100644 index 00000000..9e165ff --- /dev/null +++ b/www-client/firefox/files/mozilla_configure_regexp_esr.patch @@ -0,0 +1,32 @@ +From: Jory A. Pratt + +Note: the first occurrence of :space: is [:space:] (with a single pair +of []), where it should be [[:space:]] (with two pairs of []). + +This causes the sed command to fail (with the error message quoted in +my original report), driving to failure the whole configure step. + +https://bugzilla.mozilla.org/show_bug.cgi?id=1329252 + +diff --git a/build/autoconf/icu.m4 b/build/autoconf/icu.m4 +--- a/build/autoconf/icu.m4 ++++ b/build/autoconf/icu.m4 +@@ -68,17 +68,17 @@ if test -n "$USE_ICU"; then + icudir="$_topsrcdir/intl/icu/source" + if test ! -d "$icudir"; then + icudir="$_topsrcdir/../../intl/icu/source" + if test ! -d "$icudir"; then + AC_MSG_ERROR([Cannot find the ICU directory]) + fi + fi + +- version=`sed -n 's/^[[:space:]]*#[[:space:]]*define[[:space:]][[:space:]]*U_ICU_VERSION_MAJOR_NUM[[:space:]][[:space:]]*\([0-9][0-9]*\)[[:space:]]*$/\1/p' "$icudir/common/unicode/uvernum.h"` ++ version=`sed -n 's/^[[[:space:]]]*#[[:space:]]*define[[:space:]][[:space:]]*U_ICU_VERSION_MAJOR_NUM[[:space:]][[:space:]]*\([0-9][0-9]*\)[[:space:]]*$/\1/p' "$icudir/common/unicode/uvernum.h"` + if test x"$version" = x; then + AC_MSG_ERROR([cannot determine icu version number from uvernum.h header file $lineno]) + fi + MOZ_ICU_VERSION="$version" + + if test "$OS_TARGET" = WINNT; then + MOZ_SHARED_ICU=1 + fi diff --git a/www-client/firefox/files/update_h2_curve.patch b/www-client/firefox/files/update_h2_curve.patch new file mode 100644 index 00000000..a1f0ffa --- /dev/null +++ b/www-client/firefox/files/update_h2_curve.patch @@ -0,0 +1,30 @@ +From: Franziskus Kiefer + +Update keybits in H2 + +https://bugzilla.mozilla.org/show_bug.cgi?id=1290037 + +diff --git a/netwerk/protocol/http/Http2Session.cpp b/netwerk/protocol/http/Http2Session.cpp +--- a/netwerk/protocol/http/Http2Session.cpp ++++ b/netwerk/protocol/http/Http2Session.cpp +@@ -3516,18 +3516,18 @@ Http2Session::ConfirmTLSProfile() + RETURN_SESSION_ERROR(this, INADEQUATE_SECURITY); + } + + uint32_t keybits = ssl->GetKEAKeyBits(); + if (kea == ssl_kea_dh && keybits < 2048) { + LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to DH %d < 2048\n", + this, keybits)); + RETURN_SESSION_ERROR(this, INADEQUATE_SECURITY); +- } else if (kea == ssl_kea_ecdh && keybits < 256) { // 256 bits is "security level" of 128 +- LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to ECDH %d < 256\n", ++ } else if (kea == ssl_kea_ecdh && keybits < 224) { // see rfc7540 9.2.1. ++ LOG3(("Http2Session::ConfirmTLSProfile %p FAILED due to ECDH %d < 224\n", + this, keybits)); + RETURN_SESSION_ERROR(this, INADEQUATE_SECURITY); + } + + int16_t macAlgorithm = ssl->GetMACAlgorithmUsed(); + LOG3(("Http2Session::ConfirmTLSProfile %p MAC Algortihm (aead==6) %d\n", + this, macAlgorithm)); + if (macAlgorithm != nsISSLSocketControl::SSL_MAC_AEAD) { diff --git a/www-client/firefox/firefox-45.6.0.ebuild b/www-client/firefox/firefox-45.6.0-r1.ebuild similarity index 98% rename from www-client/firefox/firefox-45.6.0.ebuild rename to www-client/firefox/firefox-45.6.0-r1.ebuild index 444d977..9300e5a 100644 --- a/www-client/firefox/firefox-45.6.0.ebuild +++ b/www-client/firefox/firefox-45.6.0-r1.ebuild @@ -129,7 +129,9 @@ src_unpack() { src_prepare() { # Apply our patches - eapply "${WORKDIR}/firefox" + eapply "${WORKDIR}/firefox" \ + "${FILESDIR}"/mozilla_configure_regexp_esr.patch \ + "${FILESDIR}"/update_h2_curve.patch # Allow user to apply any additional patches without modifing ebuild eapply_user diff --git a/www-client/firefox/firefox-50.1.0.ebuild b/www-client/firefox/firefox-50.1.0-r1.ebuild similarity index 99% rename from www-client/firefox/firefox-50.1.0.ebuild rename to www-client/firefox/firefox-50.1.0-r1.ebuild index 5306657..6c11378 100644 --- a/www-client/firefox/firefox-50.1.0.ebuild +++ b/www-client/firefox/firefox-50.1.0-r1.ebuild @@ -120,6 +120,8 @@ src_unpack() { src_prepare() { # Apply our patches eapply "${WORKDIR}/firefox" \ + "${FILESDIR}"/mozilla_configure_regexp.patch \ + "${FILESDIR}"/update_h2_curve.patch \ "${FILESDIR}"/${PN}-48.0-pgo.patch # Enable gnomebreakpad