[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-commits] [Git][tpo/applications/mullvad-browser][mullvad-browser-140.10.0esr-15.0-1] 24 commits: Bug 1536243 - Use av_mallocz to zero FFmpeg extradata padding. r=media-playback-reviewers,jolin

Title: GitLab

ma1 pushed to branch mullvad-browser-140.10.0esr-15.0-1 at The Tor Project / Applications / Mullvad Browser

Commits:

  • bb7a7237
    by Paul Adenot at 2026-04-20T17:00:52+02:00 
    Bug 1536243 - Use av_mallocz to zero FFmpeg extradata padding. r=media-playback-reviewers,jolin

Differential Revision: https://phabricator.services.mozilla.com/D287605
  • c7482c87
    by Randell Jesup at 2026-04-20T17:00:57+02:00 
    Bug 1577576: return an error on an invalid frame ID in HTTP2 r=necko-reviewers,valentin

Differential Revision: https://phabricator.services.mozilla.com/D284287
  • c7543f03
    by Olli Pettay at 2026-04-20T17:01:01+02:00 
    Bug 1880429, clear source browsing context early, if possible, r=nika

Differential Revision: https://phabricator.services.mozilla.com/D242075
  • 73c76ae2
    by Roger Yang at 2026-04-20T17:01:06+02:00 
    Bug 1992585 - Set AppLinks intent selector to null.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D290907

Differential Revision: https://phabricator.services.mozilla.com/D293455
  • 7554aaab
    by Artur Iunusov at 2026-04-20T17:01:10+02:00 
    Bug 2010310 - Add CanNavigate() check in RecvLoadURI() and RecvInternalLoad(), r=smaug,tschuster

Differential Revision: https://phabricator.services.mozilla.com/D280216
  • 39e118bc
    by Jens Stutte at 2026-04-20T17:01:14+02:00 
    Bug 2016901 - Fix potential race in NSSIOLayer. r=keeler

Differential Revision: https://phabricator.services.mozilla.com/D283409
  • 65f0864c
    by Byron Campen at 2026-04-20T17:01:17+02:00 
    Bug 2021768: Use unsigned char for these.  a=diannaS

Original Revision: https://phabricator.services.mozilla.com/D287613

Differential Revision: https://phabricator.services.mozilla.com/D289861
  • 7da4069a
    by alastor0325 at 2026-04-20T17:01:21+02:00 
    Bug 2021788 - Guard against signed long overflow in WMFVideoMFTManager::CreateBasicVideoFrame(). r=media-playback-reviewers,jolin

Guard CreateBasicVideoFrame() against invalid strides by rejecting
non-positive values early, widening the y_size and v_size multiplications
to int64_t, validating the results fit in uint32_t before narrowing, and
casting stride to int64_t before computing halfStride to avoid overflow
when stride == INT32_MAX.

IMF2DBuffer::Lock2D can return a negative stride for bottom-up images.
Multiplying a negative or large LONG stride by the frame height using
signed 32-bit arithmetic is undefined behaviour and produces a huge
uint32_t offset that is then used to index into the locked IMF buffer,
causing an OOB read.

Differential Revision: https://phabricator.services.mozilla.com/D288533
  • a484dcdd
    by Valentin Gosu at 2026-04-20T17:01:26+02:00 
    Bug 2022726 - Do not allow trrServer in DNS request issued by content process r=necko-reviewers,kershaw

Differential Revision: https://phabricator.services.mozilla.com/D288150
  • 60ad7085
    by Karl Tomlinson at 2026-04-20T17:01:30+02:00 
    Bug 2022746 Convert pointer to boolean instead of comparing with 0 r=media-playback-reviewers,padenot

"When testing a pointer, use (!myPtr) or (myPtr)"
https://firefox-source-docs.mozilla.org/code-quality/coding-style/coding_style_cpp.html#c-c-practices

Differential Revision: https://phabricator.services.mozilla.com/D288804
  • 4f6d52a8
    by Karl Tomlinson at 2026-04-20T17:01:34+02:00 
    Bug 2022746 move reftest-wait to html element r=media-playback-reviewers,padenot

The test did crash without this, but is more thorough with a functional
reftest-wait and saves the same bug being copied to other tests.

Also remove the play() and the await for its Promise.
With https://github.com/mozilla/nestegg/pull/77,
the demux error is detected before "canplay".
The test still crashes in builds without the code fixes.

Differential Revision: https://phabricator.services.mozilla.com/D288803
  • a639d8a1
    by Valentin Gosu at 2026-04-20T17:01:38+02:00 
    Bug 2023302 - null check mResponseHead when calling ClearHeaders r=necko-reviewers,jesup

Differential Revision: https://phabricator.services.mozilla.com/D288411
  • 60165727
    by Andrew Osmond at 2026-04-20T17:01:43+02:00 
    Bug 2024238.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D292321

Differential Revision: https://phabricator.services.mozilla.com/D292963
  • 03b8672a
    by Chris Martin at 2026-04-20T17:01:47+02:00 
    Bug 2024240 - Clean up LinuxGamepadService lifecycle interactions with event dispatching.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D290238

Differential Revision: https://phabricator.services.mozilla.com/D291596
  • ec5df56c
    by Randell Jesup at 2026-04-20T17:01:51+02:00 
    Bug 2024265: Clean up locking in nsSocketTransport r=necko-reviewers,kershaw

Differential Revision: https://phabricator.services.mozilla.com/D288563
  • 45fa8488
    by Valentin Gosu at 2026-04-20T17:01:55+02:00 
    Bug 2024760 - Handle WebSocketChannel::IsPersistentFramePtr correctly  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D288874

Differential Revision: https://phabricator.services.mozilla.com/D290871
  • c6649016
    by Tom Schuster at 2026-04-20T17:01:59+02:00 
    Bug 2025281 - Cleanup MediaIPCUtils.  a=diannaS

Original Revision: https://phabricator.services.mozilla.com/D289190

Differential Revision: https://phabricator.services.mozilla.com/D290479
  • c664789f
    by Lee Salzman at 2026-04-20T17:02:03+02:00 
    Bug 2026297.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D290596

Differential Revision: https://phabricator.services.mozilla.com/D290953
  • 6dc585b7
    by Lee Salzman at 2026-04-20T17:02:08+02:00 
    Bug 2026601.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D290285

Differential Revision: https://phabricator.services.mozilla.com/D290952
  • fe138817
    by Timothy Nikkel at 2026-04-20T17:02:11+02:00 
    Bug 2027287.  a=diannaS DONTBUILD

Differential Revision: https://phabricator.services.mozilla.com/D291073
  • 3b61cacc
    by hackademix at 2026-04-20T17:02:15+02:00 
    Bug 2029301 backport pending ffmpeg update.
  • d5fffbf3
    by Jonathan Kew at 2026-04-20T17:02:19+02:00 
    Bug 2029446 - Don't create frames for elements that are not allowed in an svg-glyphs document.  a=RyanVM DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D293133

Differential Revision: https://phabricator.services.mozilla.com/D293514
  • 93e971ca
    by Jonathan Kew at 2026-04-20T17:02:23+02:00 
    Bug 2029446 - Don't hold on to EntryHandles while creating an svg-glyphs document.  a=RyanVM DONTBUILD

(clauditor-suggested fix)

Original Revision: https://phabricator.services.mozilla.com/D293134

Differential Revision: https://phabricator.services.mozilla.com/D293515
  • 866d3373
    by Emilio Cobos Álvarez at 2026-04-20T17:02:26+02:00 
    Bug 2029699 - Simplify InlineBackgroundData handling.  a=diannaS DONTBUILD

Original Revision: https://phabricator.services.mozilla.com/D292380

Differential Revision: https://phabricator.services.mozilla.com/D293141

40 changed files:

The diff was not included because it is too large.

—
View it on GitLab.
You're receiving this email because of your account on gitlab.torproject.org. Manage all notifications · Help Notification message regarding https://gitlab.torproject.org/tpo/applications/mullvad-browser/-/compare/d9d20a240044d71d47748ccd91bd65f8352ebb3b...866d3373edf96a47c6281fb308e2fbdf1473f640 at 1776697411 

_______________________________________________
tor-commits mailing list -- tor-commits@xxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to tor-commits-leave@xxxxxxxxxxxxxxxxxxxx