-
539bba5f
by Sebastian Hengst at 2026-07-14T07:58:41+02:00
Bug 2046256 - extend web-platform-tests test certificates until 2027-05-11. r=Sasha,jgraham a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D305756
-
18436ae0
by Release Engineering Landoscript at 2026-07-14T07:58:43+02:00
Automatic version bump NO BUG a=release CLOSED TREE
-
919ee8b6
by Release Engineering Landoscript at 2026-07-14T07:58:45+02:00
No Bug - Update configs after merge day operations a=release
IGNORE BROKEN CHANGESETS
CLOSED TREE
-
96fbfbbe
by Nicholas Rishel at 2026-07-14T07:58:46+02:00
Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D277134
Differential Revision: https://phabricator.services.mozilla.com/D305398
-
6ee9a1d1
by rperta at 2026-07-14T07:58:48+02:00
Revert "Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM" for causing build bustages DONTBUILD
This reverts commit 7fb19cd315c5b13d32fda38234fa1fd0efa06df6.
-
de6d88c6
by Andrea Marchesini at 2026-07-14T07:58:50+02:00
Bug 2027788 - Ignore the distribution ini file if its global.id is mozillaonline, a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D305913
-
d1f9d60d
by Emilio Cobos Álvarez at 2026-07-14T07:58:52+02:00
Bug 2046162 - Remove some redundant pub qualifiers. a=RyanVM DONTBUILD
The enum is not public so this doesn't change behavior but a patch I'm
working on in cbindgen gets a bit confused with this.
Original Revision: https://phabricator.services.mozilla.com/D305678
Differential Revision: https://phabricator.services.mozilla.com/D305831
-
539eb828
by Andrew Osmond at 2026-07-14T07:58:54+02:00
Bug 2045730. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305642
Differential Revision: https://phabricator.services.mozilla.com/D305722
-
ec17aa79
by Alastor Wu at 2026-07-14T07:58:55+02:00
Bug 2043739 - (esr140) Adjust CDM lifetime handling in the Media Foundation CDM IPC path. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306517
-
112636c6
by Alastor Wu at 2026-07-14T07:58:57+02:00
Bug 2045281 - Use the decoded frame format for ffmpeg video chroma plane geometry. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305741
Differential Revision: https://phabricator.services.mozilla.com/D306247
-
373a6cd5
by Leo Tenenbaum at 2026-07-14T07:58:59+02:00
Bug 2045732 - a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305347
Differential Revision: https://phabricator.services.mozilla.com/D306136
-
f6fc626a
by Brad Werth at 2026-07-14T07:59:00+02:00
Bug 2040119: Enforce ownership of external image in WebRenderBridgeParent::UpdateSharedExternalImage. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304923
Differential Revision: https://phabricator.services.mozilla.com/D306193
-
f87496d9
by Valentin Gosu at 2026-07-14T07:59:02+02:00
Bug 2036591 - Use origin attributes in FailDelayManager a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304395
Differential Revision: https://phabricator.services.mozilla.com/D306416
-
01e0884b
by ffxbld at 2026-07-14T07:59:04+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D306766
-
2794c54e
by Tim Huang at 2026-07-14T07:59:06+02:00
Bug 2038587 - Introduce "wsb" to the application reputation check. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D301066
Differential Revision: https://phabricator.services.mozilla.com/D306933
-
0ec42a7f
by Emilio Cobos Álvarez at 2026-07-14T07:59:08+02:00
Bug 2045616 - Fix CharacterDataBuffer OOM handling. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305165
Differential Revision: https://phabricator.services.mozilla.com/D306945
-
e64f4970
by Emilio Cobos Álvarez at 2026-07-14T07:59:09+02:00
Bug 2045413 - Deal correctly with <area> element removals. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305124
Differential Revision: https://phabricator.services.mozilla.com/D306939
-
1b0d5d4a
by Bob Owen at 2026-07-14T07:59:11+02:00
Bug 2045769 - Check required snapshot shmem size against actual size. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305707
Differential Revision: https://phabricator.services.mozilla.com/D306972
-
4cb8c8da
by Tooru Fujisawa at 2026-07-14T07:59:13+02:00
Bug 2013415 - Use b-linux-docker-large-amd for searchfox jobs. r=ahal a=NPOTB DONTBUILD
This reduces the time taken by the linux64-searchfox job from 113min to 53min.
Differential Revision: https://phabricator.services.mozilla.com/D283000
-
56b15878
by Ryan VanderMeulen at 2026-07-14T07:59:15+02:00
Bug 2013415 - Add b-linux-docker-large-amd worker alias to esr140 config. a=bustage DONTBUILD
-
06edc5db
by Ryan VanderMeulen at 2026-07-14T07:59:16+02:00
Bug 2013415 - Use docker-worker implementation for b-linux-docker-large-amd alias. a=bustage DONTBUILD
-
aab1a725
by Nicholas Rishel at 2026-07-14T07:59:18+02:00
Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D277134
Differential Revision: https://phabricator.services.mozilla.com/D305398
-
daf7c58c
by Tom Schuster at 2026-07-14T07:59:20+02:00
Bug 2044612 - Use ClientInfo for font loading in Worker. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305486
Differential Revision: https://phabricator.services.mozilla.com/D307286
-
2852f195
by Tom Schuster at 2026-07-14T07:59:22+02:00
Bug 2041902 - For WebTransport require a ClientInfo. . a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305171
Differential Revision: https://phabricator.services.mozilla.com/D307271
-
934bec14
by Alastor Wu at 2026-07-14T07:59:23+02:00
Bug 2045756 - Skip a renderer-referenced surface when matching by FFmpeg id in FFmpegVideoFramePool a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305429
Differential Revision: https://phabricator.services.mozilla.com/D307086
-
621a5716
by Timothy Nikkel at 2026-07-14T07:59:25+02:00
Bug 2045624. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306891
-
f28dd889
by Masayuki Nakano at 2026-07-14T07:59:26+02:00
Bug 2045405 - Improve the error handling in `PresShell::CompleteMove` a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305544
Differential Revision: https://phabricator.services.mozilla.com/D307163
-
977b6ade
by Timothy Nikkel at 2026-07-14T07:59:28+02:00
Bug 2045614. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306900
-
f83036ef
by Lee Salzman at 2026-07-14T07:59:29+02:00
Bug 2045625. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305785
Differential Revision: https://phabricator.services.mozilla.com/D307126
-
d266991d
by Lee Salzman at 2026-07-14T07:59:31+02:00
Bug 2045185. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307130
-
62f08a35
by Edgar Chen at 2026-07-14T07:59:32+02:00
Bug 2045513 - Make parser update form owner properly; a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305669
Differential Revision: https://phabricator.services.mozilla.com/D307295
-
c14828b2
by az at 2026-07-14T07:59:34+02:00
Bug 2045742 - a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305387
Differential Revision: https://phabricator.services.mozilla.com/D307110
-
e2eb16e5
by Andrew McCreight at 2026-07-14T07:59:36+02:00
Bug 2048110 - Add remoteTypes to AboutTabCrashed, LightweightTheme, Megalist. a=RyanVM DONTBUILD
These are only used in a few specific processes.
Original Revision: https://phabricator.services.mozilla.com/D307152
Differential Revision: https://phabricator.services.mozilla.com/D307574
-
a878dff6
by Leo Tenenbaum at 2026-07-14T07:59:37+02:00
Bug 2047718 - Check for unexpected DOM changes in more places in EnsureNoInvisibleWhiteSpaces. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306863
Differential Revision: https://phabricator.services.mozilla.com/D307559
-
a2ced920
by Brad Werth at 2026-07-14T07:59:39+02:00
Bug 2045184: Make SharedContextWebgl destructor prevent resurrection. a=RyanVM
Detaching the WeakPtr early prevents the object from being AddRef'ed by
anything later in the destructor.
Original Revision: https://phabricator.services.mozilla.com/D305720
Differential Revision: https://phabricator.services.mozilla.com/D307604
-
6ecc0fb4
by Ryan VanderMeulen at 2026-07-14T07:59:40+02:00
Bug 2045185 - Fix bustage from stride type mismatch. a=bustage
stride is a plain size_t on esr140 (GetAlignedStride's Maybe<> return type was
never backported), so the .value() call from the backport fails to compile.
-
a56b3b58
by Eden Chuang at 2026-07-14T07:59:42+02:00
Bug 2005113 - Bind FetchBodyBase::mReadableStream to the body stream and rebind it on clone(). . a=RyanVM DONTBUILD
Create the body ReadableStream from the underlying body input stream directly.
When clone() is called before the stream has been read and the underlying body
is not cloneable, clone() replaces the original input stream; repoint the
existing unread native ReadableStream at the replacement so the original stream
is not read from two places. This keeps native bodies native (cancellation of
an unread stream still tears down the channel, and the consume path keeps
reading the body input stream directly) without teeing native byte streams.
This no longer clones the body when creating the ReadableStream, so it does not
buffer the whole body; restore the huge-fetch crashtest expectations that were
disabled to avoid OOMing the 32-bit process.
Original Revision: https://phabricator.services.mozilla.com/D280568
(cherry picked from commit 38e360c0d435c4bd9b0e45b207877610506433f3)
Differential Revision: https://phabricator.services.mozilla.com/D307754
-
91346671
by Alastor Wu at 2026-07-14T07:59:43+02:00
Bug 2045424 - (esr140) Constrain the per-sample IV size in the CENC parser and ClearKey decryptor. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307384
-
b542ca66
by Alastor Wu at 2026-07-14T07:59:45+02:00
Bug 2045395 - (esr140) Use checked arithmetic for the interleave buffer length in AudioDecoderInputTrack a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307385
-
2132f01f
by Shravan Narayan at 2026-07-14T07:59:46+02:00
Bug 2045149 - Fix rlbox's unnecessary rejection of unaligned transfer buffers a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D307194
Differential Revision: https://phabricator.services.mozilla.com/D307859
-
81ebddf5
by ffxbld at 2026-07-14T07:59:48+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D308004
-
5d4e2c27
by Jonathan Kew at 2026-07-14T07:59:50+02:00
Bug 2045378 - Validate font descriptor in UnscaledFontFontconfig::CreateFromFontDescriptor. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305662
Differential Revision: https://phabricator.services.mozilla.com/D308002
-
ea9a57c9
by Jonathan Kew at 2026-07-14T07:59:51+02:00
Bug 2045771 - Validate kern subtable length. a=pascalc DONTBUILD
As suggested by clauditor.
Original Revision: https://phabricator.services.mozilla.com/D306160
Differential Revision: https://phabricator.services.mozilla.com/D307998
-
5558f5b6
by Jan-Niklas Jaeschke at 2026-07-14T07:59:53+02:00
Bug 2045402 - Refactor CrossShadowBoundaryRange::DoSetRange. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305276
Differential Revision: https://phabricator.services.mozilla.com/D308085
-
61f558ea
by Ben Visness at 2026-07-14T07:59:54+02:00
Bug 2043271. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306329
Differential Revision: https://phabricator.services.mozilla.com/D308069
-
c6f961a5
by Henri Sivonen at 2026-07-14T07:59:56+02:00
Bug 2045417. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D305108
Differential Revision: https://phabricator.services.mozilla.com/D307995
-
83d78108
by Timothy Nikkel at 2026-07-14T07:59:57+02:00
Bug 2045775. a=pascalc DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307939
-
8a2d0e82
by Jonathan Kew at 2026-07-14T07:59:59+02:00
Bug 2045612 - Take ownership of the state in RestoreFormControlState. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307613
Differential Revision: https://phabricator.services.mozilla.com/D307827
-
cca5581d
by David Shin at 2026-07-14T08:00:00+02:00
Bug 2045611: a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307076
Differential Revision: https://phabricator.services.mozilla.com/D307776
-
a74a07d8
by Tomislav Jovanovic at 2026-07-14T08:00:02+02:00
Bug 2048267 - Enable WebExtensions WPT tests on ESR140 a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D307614
Differential Revision: https://phabricator.services.mozilla.com/D307920
-
190d775c
by Matthew Gregan at 2026-07-14T08:00:03+02:00
Bug 2042033 - Update audioipc to 3f0d4aef7a2c06b0146384592b312a7f47ab7cea. a=pascalc DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307454
-
0346d71c
by Jan de Mooij at 2026-07-14T08:00:05+02:00
Bug 2045957 - Initialize BaselineFrame return value slot in OnLeaveBaselineFrame. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305464
Differential Revision: https://phabricator.services.mozilla.com/D307470
-
a3214b92
by Andrew Osmond at 2026-07-14T08:00:06+02:00
Bug 2045187. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305653
Differential Revision: https://phabricator.services.mozilla.com/D305719
-
c213399d
by Justin Link at 2026-07-14T08:00:08+02:00
Bug 2028663: Fixed error-checking in WinRegistry a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D291621
Differential Revision: https://phabricator.services.mozilla.com/D308307
-
d5962549
by Julien Cristau at 2026-07-14T08:00:09+02:00
Bug 2048897 - fix update-verify-config failures on esr for win64-aarch64 DONTBUILD a=RyanVM
That platform was discontinued on esr115 which confuses our scripts.
Set last-watershed to 140.0esr to bypass the issue.
Original Revision: https://phabricator.services.mozilla.com/D307745
Differential Revision: https://phabricator.services.mozilla.com/D307844
-
68568f1e
by Randell Jesup at 2026-07-14T08:00:11+02:00
Bug 2031768: Validate Principals in CookieStore a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D294473
Differential Revision: https://phabricator.services.mozilla.com/D308285
-
2b1c02b8
by Kai Engert at 2026-07-14T08:00:12+02:00
Bug 2013230 - Use strnlen in mozilla::PrintfTarget::cvt_s. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D280910
Differential Revision: https://phabricator.services.mozilla.com/D308438
-
5015ae65
by Masayuki Nakano at 2026-07-14T08:00:14+02:00
Bug 2045619 - Make `CompositionTransaction::DoTransaction` scan the replace start position as far as possible a=RyanVM DONTBUILD
The replace start may be in the following `Text`. Therefore, we should
scan the following `Text` before inserting the new composition string.
Original Revision: https://phabricator.services.mozilla.com/D305783
Differential Revision: https://phabricator.services.mozilla.com/D307458
-
aa99b2cc
by Emilio Cobos Álvarez at 2026-07-14T08:00:16+02:00
Bug 2045406 - Validate end of cff dict. a=RyanVM DONTBUILD
Sent upstream in https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967
Original Revision: https://phabricator.services.mozilla.com/D305850
Differential Revision: https://phabricator.services.mozilla.com/D307732
-
b6b3d205
by Emilio Cobos Álvarez at 2026-07-14T08:00:17+02:00
Bug 2045406 - Check cff dict operator / operand sizes. a=RyanVM DONTBUILD
Missed this one from the AI report. Also submitted upstream.
Original Revision: https://phabricator.services.mozilla.com/D306885
Differential Revision: https://phabricator.services.mozilla.com/D307733
-
b41fb1a0
by Jonathan Kew at 2026-07-14T08:00:19+02:00
Bug 2045518 - Ensure gfxFontEntry's mFamilyName field is guarded by mLock. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305176
Differential Revision: https://phabricator.services.mozilla.com/D307514
-
535c1b7f
by Andreas Farre at 2026-07-14T08:00:21+02:00
Bug 2045618 - Make sure to consider idle timeouts when getting id. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305582
Differential Revision: https://phabricator.services.mozilla.com/D308000
-
ed369b87
by Jon Coppeard at 2026-07-14T08:00:22+02:00
Bug 2045451 - Prevent allocation of object elemets abutting the end of a nursery chunk a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305804
Differential Revision: https://phabricator.services.mozilla.com/D307781
-
2bb1ad2a
by Jan de Mooij at 2026-07-14T08:00:24+02:00
Bug 2045454 - Clamp length of regexp captures array for dollar substitution. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305181
Differential Revision: https://phabricator.services.mozilla.com/D307473
-
fa1f97c2
by Ryan VanderMeulen at 2026-07-14T08:00:25+02:00
Bug 2045518 - Use FamilyName() accessor in CacheFont's assertion to fix thread-safety bustage. a=bustage
The backport missed converting one direct mFamilyName access in the NS_ASSERTION at the top of
UserFontCache::CacheFont, breaking debug builds under -Wthread-safety-analysis.
-
10635970
by Emilio Cobos Álvarez at 2026-07-14T08:00:27+02:00
Bug 2045604 - Don't leak the static doc via the relevant global of the context. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306772
Differential Revision: https://phabricator.services.mozilla.com/D307727
-
511f1046
by Julian Descottes at 2026-07-14T08:00:28+02:00
Bug 2027519 - [devtools] Use the real source url for sourcemap resolution a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304524
Differential Revision: https://phabricator.services.mozilla.com/D308464
-
2234fbe3
by Calixte Denizet at 2026-07-14T08:00:30+02:00
Bug 2037770 - Honor iframe sandbox flags when handling pdf.js downloads a=RyanVM DONTBUILD
Cherry pick pdf.js changes from https://github.com/mozilla/pdf.js/commit/ece1e2ed0c58eb9641da33259d958fa9122b5804.
Differential Revision: https://phabricator.services.mozilla.com/D308475
-
58795e1f
by Lee Salzman at 2026-07-14T08:00:31+02:00
Bug 2047729. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307935
Differential Revision: https://phabricator.services.mozilla.com/D308335
-
bfbe3d3a
by Lee Salzman at 2026-07-14T08:00:33+02:00
Bug 2045741. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306315
Differential Revision: https://phabricator.services.mozilla.com/D308338
-
cdbf2a44
by James Teh at 2026-07-14T08:00:35+02:00
Bug 2047957: Ensure cached line start offsets are valid. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307467
Differential Revision: https://phabricator.services.mozilla.com/D308429
-
e3494a02
by Valentin Gosu at 2026-07-14T08:00:36+02:00
Bug 2048934 - Make mInVisitHeaders checks reentrant a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308013
Differential Revision: https://phabricator.services.mozilla.com/D308471
-
463c059d
by André Bargull at 2026-07-14T08:00:38+02:00
Bug 2045482: Align with hasSpaceForInsts to simplify test case. r=jandem a=RyanVM DONTBUILD
Align with `hasSpaceForInsts` so the test case doesn't need to emit
thirty additional nop instructions.
Differential Revision: https://phabricator.services.mozilla.com/D306374
-
c5bb9621
by Julian Seward at 2026-07-14T08:00:39+02:00
Bug 2043035. . a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D303979
Differential Revision: https://phabricator.services.mozilla.com/D308724
-
379ade02
by Jonathan Kew at 2026-07-14T08:00:41+02:00
Bug 2045607 - Hold a strong ref during GetFontAt lookup. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307564
Differential Revision: https://phabricator.services.mozilla.com/D308506
-
2eb83aca
by Olli Pettay at 2026-07-14T08:00:42+02:00
Bug 2045515, avoid leaking a slot, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305076
Differential Revision: https://phabricator.services.mozilla.com/D308743
-
c0238e7b
by Julian Seward at 2026-07-14T08:00:44+02:00
Bug 2045443. . a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305869
Differential Revision: https://phabricator.services.mozilla.com/D308729
-
dbb05e5c
by Olli Pettay at 2026-07-14T08:00:45+02:00
Bug 2045414, be consistent with the promise resolve/reject handling, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306588
Differential Revision: https://phabricator.services.mozilla.com/D308735
-
533c7b4f
by Jan-Niklas Jaeschke at 2026-07-14T08:00:47+02:00
Bug 2049404 - Remove unused method from nsINode, add mainthread checks. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308201
Differential Revision: https://phabricator.services.mozilla.com/D308748
-
7eba4187
by James Teh at 2026-07-14T08:00:48+02:00
Bug 2047716: Ensure cache is valid. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307466
Differential Revision: https://phabricator.services.mozilla.com/D308698
-
069254af
by longsonr at 2026-07-14T08:00:50+02:00
Bug 2049407 Part 1 - Detach observers on canvas destruction a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308288
Differential Revision: https://phabricator.services.mozilla.com/D308731
-
18daaf56
by Daniel Darnell at 2026-07-14T08:00:51+02:00
Bug 2005200 - Make Thunderbird langpacks depend on correct Thunderbird epoch. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305463
Differential Revision: https://phabricator.services.mozilla.com/D309200
-
df123116
by Mike Hommey at 2026-07-14T08:00:53+02:00
Bug 2029761 - Handle large values returned by strnlen as an error. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D303290
Differential Revision: https://phabricator.services.mozilla.com/D308936
-
eafa9906
by Ryan VanderMeulen at 2026-07-14T08:00:54+02:00
Bug 2048062 - Run apt-get update before installing build deps in the debian-packages image. a=diannaS
The ubuntu2404 raw image pins an apt snapshot for reproducibility, and the
package lists from the parent image aren't usable in the debian-packages child,
so apt-get install fails to locate any package. Refresh the lists first. The
snapshot pin is inherited by the child image, so the resolved package versions
are unchanged.
Original Revision: https://phabricator.services.mozilla.com/D307183
Differential Revision: https://phabricator.services.mozilla.com/D308925
-
70c61e27
by Edgar Chen at 2026-07-14T08:00:56+02:00
Bug 2046215 - Associate image elements with form only if the form and the intended parent are in the same tree; a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305733
Differential Revision: https://phabricator.services.mozilla.com/D309120
-
f88407c7
by Alastor Wu at 2026-07-14T08:00:57+02:00
Bug 2045508 - Reset the create-promise id once the create promise settles in MediaKeys. a=RyanVM (esr140) DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D308879
-
a2aaa91d
by Brad Werth at 2026-07-14T08:00:59+02:00
Bug 2045626: Compute range of convolve filter in integer domain. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308096
Differential Revision: https://phabricator.services.mozilla.com/D309197
-
9f7e836f
by Artur Iunusov at 2026-07-14T08:01:00+02:00
Bug 2045397 - Cancel the network channel when failing a cached worker script load a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307328
Differential Revision: https://phabricator.services.mozilla.com/D308528
-
1011fc28
by Andrew McCreight at 2026-07-14T08:01:02+02:00
Bug 2049523 - Make ToJSValue for float consistent with double. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308323
Differential Revision: https://phabricator.services.mozilla.com/D308559
-
316f1730
by Lee Salzman at 2026-07-14T08:01:03+02:00
Bug 2049822. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308391
Differential Revision: https://phabricator.services.mozilla.com/D308818
-
b884d1dc
by Lee Salzman at 2026-07-14T08:01:05+02:00
Bug 2025369. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308172
Differential Revision: https://phabricator.services.mozilla.com/D309240
-
cd6b6b1c
by Lee Salzman at 2026-07-14T08:01:06+02:00
Bug 2050151. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308694
Differential Revision: https://phabricator.services.mozilla.com/D309242
-
fa52b069
by Chun-Min Chang at 2026-07-14T08:01:08+02:00
Bug 2045415 - Harden buffer sizing in Web Audio decoding a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D309159
-
9048e800
by Lee Salzman at 2026-07-14T08:01:09+02:00
Bug 2049805. a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D308859
-
1f224164
by ffxbld at 2026-07-14T08:01:11+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D309303
-
6775f755
by Sotaro Ikeda at 2026-07-14T08:01:13+02:00
Bug 2049818 a=pascalc
Signed-off-by: Pascal Chevrel <pascal@xxxxxxxxxxx>
-
8ae7931d
by Ryan VanderMeulen at 2026-07-14T08:01:14+02:00
Bug 2051165 - Move ub18 package sources off launchpad.net URLs r=firefox-build-system-reviewers,sergesanspaille a=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D309272
-
b527cc72
by Simon Farre at 2026-07-14T08:01:16+02:00
Bug 2045396 - Abort parser that otherwise could trigger the running of script when it shouldn't a=RyanVM DONTBUILD
Only <embed> and <object> teardown seem to finalize parsing, and circumvent script-safety-aware checks which can trigger script running like the bug displays.
nsParser::Terminate is eventually called via nsDocShell::Destroy() also, but this way we ensure the above doesn't happen, provided that NS_BINDING_ABORTED is passed in.
Original Revision: https://phabricator.services.mozilla.com/D305221
Differential Revision: https://phabricator.services.mozilla.com/D309304
-
bbc1b40f
by Valentin Gosu at 2026-07-14T08:01:17+02:00
Bug 2041001 - Drop intermediary HTTPS result when following alias a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308991
Differential Revision: https://phabricator.services.mozilla.com/D309322
-
83d87230
by Vincent Hilla at 2026-07-14T08:01:19+02:00
Bug 2043820 - Reject _javascript_ URI in nsDocShellLoadState. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305829
Differential Revision: https://phabricator.services.mozilla.com/D309583
-
0e4c6521
by Karl Tomlinson at 2026-07-14T08:01:20+02:00
Bug 2042242 Start fallback driver after queuing cubeb stream init a=RyanVM
This keeps cubeb operations in order and means that no other thread runs the
graph while mStreamName is passed to the cubeb operation thread.
MaybeStartAudioStream() no longer uses Start() to queue the stream init,
because it does not need to and removing this caller allows Start() to more
simply handle its remaining use cases. MaybeStartAudioStream() never starts a
fallback driver nor stops a previous driver because it is called from the
fallback driver loop.
Original Revision: https://phabricator.services.mozilla.com/D305794
Differential Revision: https://phabricator.services.mozilla.com/D309475
-
fc84c243
by Andrew McCreight at 2026-07-14T08:01:22+02:00
Bug 2050990 - Call JS_NumberValue in ClientWebGLContext.cpp. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D309205
Differential Revision: https://phabricator.services.mozilla.com/D309810
-
3e4ba2e6
by Chun-Min Chang at 2026-07-14T08:01:24+02:00
Bug 2047723 - Cherry-pick commit f738b1132ec1fd56efc90367898244cf52d9e6a5 for libsoundtouch a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D309945
-
073784f9
by Lee Salzman at 2026-07-14T08:01:25+02:00
Bug 2051666. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309674
Differential Revision: https://phabricator.services.mozilla.com/D309983
-
23aadda4
by Lee Salzman at 2026-07-14T08:01:27+02:00
Bug 2049405. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308437
Differential Revision: https://phabricator.services.mozilla.com/D309967
-
4316653e
by Valentin Gosu at 2026-07-14T08:01:28+02:00
Bug 2050668 - WS: set mDataStarted before dispatching runnable a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308990
Differential Revision: https://phabricator.services.mozilla.com/D309771
-
ed0010df
by Andrew McCreight at 2026-07-14T08:01:30+02:00
Bug 2050657 - Fix more floating point setNumber calls. a=RyanVM
Plus a DoubleValue because we might as well fix both EventDispatcher issues
in one patch.
Original Revision: https://phabricator.services.mozilla.com/D308928
Differential Revision: https://phabricator.services.mozilla.com/D309823
-
0debeb1f
by Andrew McCreight at 2026-07-14T08:01:31+02:00
Bug 2050657 - Fixes for setDouble, Float32Value and JS::NumberValue. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D309191
Differential Revision: https://phabricator.services.mozilla.com/D309824
-
9e5c64d6
by Andrew McCreight at 2026-07-14T08:01:32+02:00
Bug 2050657 - Ensure UbiNode Node::identifier() is representable. a=RyanVM
Node::identifier() gets used as a JS value in a few places, so we should make
sure that it is a nice happy non-NaN value representable as a double. It looks
like all of the callers are passing in pointers, so it should be fine.
Original Revision: https://phabricator.services.mozilla.com/D309192
Differential Revision: https://phabricator.services.mozilla.com/D309825
-
384482bb
by Arnaud Bienner at 2026-07-14T08:01:34+02:00
Bug 2051285 - Useless reinterpret_cast in EncryptingOutputStream_impl.h a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309361
Differential Revision: https://phabricator.services.mozilla.com/D310141
-
bf1fded7
by Arnaud Bienner at 2026-07-14T08:01:35+02:00
Bug 2044536 - Quota: make EncryptedBlock::RoundedUpToBasicBlockSize public and use it in EncryptingOutputStream, and propertly clear buffer a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309603
Differential Revision: https://phabricator.services.mozilla.com/D310142
-
455196ce
by Jens Stutte at 2026-07-14T08:01:37+02:00
Bug 2045510 - Reject snappy CompressedData chunks shorter than the CRC field. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305218
Differential Revision: https://phabricator.services.mozilla.com/D309799
-
a8fdd5d3
by Jens Stutte at 2026-07-14T08:01:38+02:00
Bug 2048795 - Guard access to the GamepadPlatformService singleton by a StaticMutex. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308034
Differential Revision: https://phabricator.services.mozilla.com/D309819
-
40f8f3ee
by Valentin Gosu at 2026-07-14T08:01:40+02:00
Bug 2045833 - Clean up nsUnknownDecoder::OnDataAvailable check a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305526
Differential Revision: https://phabricator.services.mozilla.com/D309891
-
6177c763
by Lee Salzman at 2026-07-14T08:01:41+02:00
Bug 2047719. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307948
Differential Revision: https://phabricator.services.mozilla.com/D310173
-
2ea040c9
by Jonathan Kew at 2026-07-14T08:01:43+02:00
Bug 2045865 - Use row_bytes rather than bitmap->pitch when copying glyph. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307593
Differential Revision: https://phabricator.services.mozilla.com/D310192
-
d0ae38ab
by Matthew Gregan at 2026-07-14T08:01:45+02:00
Bug 2045763. r=cubeb-reviewers,padenot a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D310249
-
fad1bf1e
by smayya at 2026-07-14T08:01:46+02:00
Bug 2049392 - improve nsStandardURL parsing. n=#necko a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309007
Differential Revision: https://phabricator.services.mozilla.com/D310086
-
7386233a
by Valentin Gosu at 2026-07-14T08:01:48+02:00
Bug 2045875 - Empty authority is not compatible with port a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D306755
Differential Revision: https://phabricator.services.mozilla.com/D310087
-
0b96dace
by Bob Owen at 2026-07-14T08:01:49+02:00
Bug 2045767 - a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305931
Differential Revision: https://phabricator.services.mozilla.com/D310114
-
9f92093d
by Randell Jesup at 2026-07-14T08:01:51+02:00
Bug 2045783: Clean up TRRQuery::CompleteLookup a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305279
Differential Revision: https://phabricator.services.mozilla.com/D310241
-
2ab9b966
by Randell Jesup at 2026-07-14T08:01:52+02:00
Bug 2045783: Add thread-safety checks to TRRQuery a=dmeehan DONTBUILD
Belt-and-suspenders; allows static analyisis
Original Revision: https://phabricator.services.mozilla.com/D305601
Differential Revision: https://phabricator.services.mozilla.com/D310242
-
c67e88d5
by Yannis Juglaret at 2026-07-14T08:01:54+02:00
Bug 2045770 - Cap constant-fold allocations. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305921
Differential Revision: https://phabricator.services.mozilla.com/D310264
-
12586d10
by DonalMe at 2026-07-14T08:01:55+02:00
Bug 2051658 a=dmeehan
-
81826c1c
by DonalMe at 2026-07-14T08:01:57+02:00
Revert "Bug 2051658 a=dmeehan" for causing build failures
This reverts commit e44a92232c4f71f420ce59f22e15f5c962f794f2.
-
4499d3f9
by Arnaud Bienner at 2026-07-14T08:01:58+02:00
Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308534
Differential Revision: https://phabricator.services.mozilla.com/D310354
-
d98efa2b
by Michael Kaply at 2026-07-14T08:02:00+02:00
Bug 2044527 - Normalize the host when matching WebsiteFilter patterns. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305900
Differential Revision: https://phabricator.services.mozilla.com/D310652
-
5e41c40e
by Tom Schuster at 2026-07-14T08:02:02+02:00
Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309362
Differential Revision: https://phabricator.services.mozilla.com/D310359
-
7bbfd405
by Jonathan Kew at 2026-07-14T08:02:03+02:00
Bug 2048801 - Validate fdselect entries before use. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308373
Differential Revision: https://phabricator.services.mozilla.com/D310395
-
972ee2ab
by Jonathan Kew at 2026-07-14T08:02:05+02:00
Bug 2049398 - Range-check glyph ID. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308374
Differential Revision: https://phabricator.services.mozilla.com/D310396
-
462e9409
by Jonathan Kew at 2026-07-14T08:02:06+02:00
Bug 2049399 - Check type1 stack size. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308375
Differential Revision: https://phabricator.services.mozilla.com/D310397
-
a9d8e07b
by ffxbld at 2026-07-14T08:02:08+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310675
-
962f032b
by Mark Banner at 2026-07-14T08:02:10+02:00
Bug 1874712 - Add a keyword for Ecosia. a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310293
-
8dadc152
by DonalMe at 2026-07-14T08:02:11+02:00
Bug 2044527 - Fix build failure on ESR140 a=bustage
-
3c97c7ae
by DonalMe at 2026-07-14T08:02:13+02:00
Revert "Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan" for causing CI failures on ESR140
This reverts commit 418229151ed0e8261397c2bbcde6112814b14947.
-
f9768159
by DonalMe at 2026-07-14T08:02:14+02:00
Revert "Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan" for causing CI errors on ESR140
This reverts commit acff26261e5c0c60cb66c290d02ff199ea637cf5.
-
9278f069
by Arnaud Bienner at 2026-07-14T08:02:16+02:00
Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308534
Differential Revision: https://phabricator.services.mozilla.com/D310354
-
58058152
by smayya at 2026-07-14T08:02:17+02:00
Bug 2045511 - update nsHttpTransaction::Close() handling of NS_BINDING_RETARGETED. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307751
Differential Revision: https://phabricator.services.mozilla.com/D310586
-
5fc59300
by James Teh at 2026-07-14T08:02:19+02:00
Bug 2046416: Ensure a hide event never occurs during a split show event. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306672
Differential Revision: https://phabricator.services.mozilla.com/D310548
-
8b53626f
by Sotaro Ikeda at 2026-07-14T08:02:20+02:00
Bug 2051653 a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309978
Differential Revision: https://phabricator.services.mozilla.com/D310545
-
ecb6e58f
by Emilio Cobos Álvarez at 2026-07-14T08:02:22+02:00
Bug 2045617 - Add some bounds checks to cairo_cff_font_read_fdselect. a=dmeehan
Attached to https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967
as well.
Original Revision: https://phabricator.services.mozilla.com/D306604
Differential Revision: https://phabricator.services.mozilla.com/D310349
-
be1ce2ea
by Eden Chuang at 2026-07-14T08:02:23+02:00
Bug 2026301 - Synchronize ThreadSafeRequestHandle::mRunnable to fix cross-thread use-after-free a=dmeehan DONTBUILD
mRunnable was a plain RefPtr read on the main thread (GetCacheCreator and the
other accessors) and cleared on the worker thread by ReleaseRequest() with no
synchronization. When the worker's store dropped the last reference to the
shared ScriptLoaderRunnable, the main thread could dereference the already-freed
pointer, producing a heap-use-after-free.
Guard mRunnable with a Mutex (enforced via MOZ_GUARDED_BY). ReleaseRequest() and
the new SetRunnable() mutate it under the lock, releasing the runnable outside
the lock so it is never destroyed while the mutex is held. Each main-thread
accessor copies mRunnable into a local strong reference under the lock and bails
if it was already released. GetCacheCreator() now returns a strong CacheCreator
reference taken under the lock, so the caller keeps it alive across DeleteCache()
even if the runnable is released on the worker thread afterwards.
Original Revision: https://phabricator.services.mozilla.com/D307211
Differential Revision: https://phabricator.services.mozilla.com/D310969
-
e7cbf2fa
by Emilio Cobos Álvarez at 2026-07-14T08:02:25+02:00
Bug 2045198 - Don't bother checking ancestors for constructed check. a=dmeehan DONTBUILD
Since we don't allow @import, we can't get there with a constructed
ancestor.
Original Revision: https://phabricator.services.mozilla.com/D309844
Differential Revision: https://phabricator.services.mozilla.com/D310859
-
90a850e0
by Jonathan Kew at 2026-07-14T08:02:26+02:00
Bug 2050368 - Check for end of charstring. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308768
Differential Revision: https://phabricator.services.mozilla.com/D310831
-
9983f101
by Randell Jesup at 2026-07-14T08:02:28+02:00
Bug 2045772: Clean up nsStandardURL::Deserialize a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305274
Differential Revision: https://phabricator.services.mozilla.com/D310198
-
bd18f217
by Daniel Holbert at 2026-07-14T08:02:29+02:00
Bug 2048799: Flip polarity of a bounds check in cairo code. a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D307892
Differential Revision: https://phabricator.services.mozilla.com/D310180
-
af2be3c0
by Eitan Isaacson at 2026-07-14T08:02:31+02:00
Bug 2045392 - Don't allow attaching children to outerdoc. a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D305621
-
46ada433
by Sotaro Ikeda at 2026-07-14T08:02:32+02:00
Bug 2051658 - for esr140 a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D310958
-
82524591
by Valentin Gosu at 2026-07-14T08:02:34+02:00
Bug 2032140 - Verify content process identity when linking background channels a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309038
Differential Revision: https://phabricator.services.mozilla.com/D311187
-
db2f4971
by Valentin Gosu at 2026-07-14T08:02:36+02:00
Bug 2043200 - Bind RedirectChannelRegistrar ids to their destination content process a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309039
Differential Revision: https://phabricator.services.mozilla.com/D311188
-
92efa456
by Atila Butkovits at 2026-07-14T08:02:37+02:00
Revert "Bug 2051658 - for esr140 a=dmeehan DONTBUILD" for causing reftest failures.
This reverts commit 58bbb58a4b533f267000b555474fa3f5f2122c61.
-
ea754fe7
by Nika Layzell at 2026-07-14T08:02:39+02:00
Bug 2027207 - Part 1: Align validation in TriggerRedirectToRealChannel and RecvNewWindowGlobal better, a=pascalc
This should make TriggerRedirectToRealChannel tighter, to hopefully
match the check in RecvNewWindowGlobal better. While this doesn't add
much in terms of security, it should reduce the risk of us encountering
surprising errors.
Original Revision: https://phabricator.services.mozilla.com/D291061
Differential Revision: https://phabricator.services.mozilla.com/D311158
-
e00e8c6b
by Nika Layzell at 2026-07-14T08:02:40+02:00
Bug 2027207 - Part 2: Handle schemes better in ValidatePrincipalCouldPotentiallyBeLoadedBy, a=pascalc
Previously this logic used `nsIPrincipal::GetScheme`, which returns the
scheme of the URI used to create the principal. This could have
unexpected behaviour for nested URIs like view-source URIs, which have a
view-source: URI scheme, but a non-view-source (e.g. https://) origin.
This patch reworks the logic to instead base the checks off of the
origin's scheme, parsing it out of the origin string.
In addition, the about: URI handling was improved somewhat to have a
better understanding of how process selection for about: URIs happens in
practice by relying on a component of the process isolation logic.
Original Revision: https://phabricator.services.mozilla.com/D291062
Differential Revision: https://phabricator.services.mozilla.com/D311159
-
77df5ce6
by Nika Layzell at 2026-07-14T08:02:42+02:00
Bug 2027207 - Part 3: Return IPC_FAIL when principal validation fails, a=pascalc
This entry actually changes the callers to perform principal validation.
This turns the code which previously would only send a telemetry ping to
a crash. I am hopeful that the rate of failures is low enough that this
won't cause an issue, and if it does, I'm hopeful that we'll be able to
figure out the cause of the mismatch.
Original Revision: https://phabricator.services.mozilla.com/D291063
Differential Revision: https://phabricator.services.mozilla.com/D311160
-
72b51bea
by Timothy Nikkel at 2026-07-14T08:02:43+02:00
Bug 2036518. r=gfx-reviewers,lsalzman a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311035
-
747f615a
by Byron Campen at 2026-07-14T08:02:45+02:00
Bug 2043188: Simplify the buffer handling in RTCEncodedFrameBase. r=sfink a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D310880
-
96b92991
by Timothy Nikkel at 2026-07-14T08:02:46+02:00
Bug 2028004. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D310743
-
ebbad998
by Randell Jesup at 2026-07-14T08:02:48+02:00
Bug 2029734: Flush before calling sctp_process_init() a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D295148
Differential Revision: https://phabricator.services.mozilla.com/D311133
-
a654bd57
by Randell Jesup at 2026-07-14T08:02:50+02:00
Bug 2045773: Add usrsctp TSN gap check a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309815
Differential Revision: https://phabricator.services.mozilla.com/D311396
-
82ece4cd
by Timothy Nikkel at 2026-07-14T08:02:51+02:00
Bug 2022635. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311246
-
72bde1d3
by Vincent Hilla at 2026-07-14T08:02:53+02:00
Bug 2035756 - Verify srcdoc and data result principal. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309545
Differential Revision: https://phabricator.services.mozilla.com/D311257
-
ca09a5e1
by Sotaro Ikeda at 2026-07-14T08:02:54+02:00
Bug 2051658 - for esr140 with D265934 a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310958
-
2605a324
by James Teh at 2026-07-14T08:02:56+02:00
Bug 2052562: Don't allow moves into a detached subtree. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D310457
Differential Revision: https://phabricator.services.mozilla.com/D311752
-
9999ec1b
by Jan de Mooij at 2026-07-14T08:02:57+02:00
Bug 2052207 - Disable OptimizeIteratorIndices optimization. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D310355
Differential Revision: https://phabricator.services.mozilla.com/D311774
-
c554ee63
by Jonathan Kew at 2026-07-14T08:02:59+02:00
Bug 2053576 - Clamp number of components assigned by SetDetailedGlyphs. a=pascalc
(Based on clauditor-suggested patch)
Original Revision: https://phabricator.services.mozilla.com/D311412
Differential Revision: https://phabricator.services.mozilla.com/D311780
-
e862ac15
by Randell Jesup at 2026-07-14T08:03:00+02:00
Bug 2045848: Avoid avoid re-initting usrsctp a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311578
-
795c6651
by ffxbld at 2026-07-14T08:03:02+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311783
-
dcd3f8e3
by Timothy Nikkel at 2026-07-14T08:03:03+02:00
Bug 2052841. Don't taint a same-origin response that a service worker substitutes for a cross-origin request. a=pascalc
When a service worker answers a cross-origin request with a same-origin
resource (respondWith(fetch(<same-origin URL>))), the response is delivered as
an internal redirect from the cross-origin request URL to the same-origin
response URL. nsITimedChannel's allRedirectsSameOrigin counts that internal
redirect as a cross-origin hop, so consumers that use it to decide tainting
(image loads, stylesheets, media) treat the resource as cross-origin and taint
it -- even though the bytes are same-origin and should be readable.
Add nsITimedChannel::allRedirectsSameOriginIgnoringInternal, computed like
allRedirectsSameOrigin but ignoring internal (e.g. service-worker response-URL)
redirects, and switch the tainting consumers (imgRequestProxy, the CSS Loader,
and the media resources) to it. Real cross-origin redirects still flip it, so
genuine cross-origin loads (including bounce-backs) still taint. Other users of
allRedirectsSameOrigin (resource timing, Fetch body-access) intentionally keep
the original flag.
Add a service-worker regression test for the same-origin substitution case
(CSS).
Differential Revision: https://phabricator.services.mozilla.com/D311505
-
c1129d22
by Timothy Nikkel at 2026-07-14T08:03:05+02:00
Bug 2050626. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311507
-
2d319501
by Vincent Hilla at 2026-07-14T08:03:07+02:00
Bug 2048851 - Clear principalToInherit in LoadPageAsViewSource. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309163
Differential Revision: https://phabricator.services.mozilla.com/D311786
-
d426780d
by Jon Coppeard at 2026-07-14T08:03:08+02:00
Bug 2046917 - Make implicit edge marking state runtime wide (ESR140) a=pascalc
Currently this is tracked per-marker but the effect should be per-runtime.
There may be multiple markers due to parallel marking.
I couldn't get the testcase to reproduce here either.
Original Revision: https://phabricator.services.mozilla.com/D307221
Differential Revision: https://phabricator.services.mozilla.com/D311837
-
f810b5ba
by Andreas Farre at 2026-07-14T08:03:10+02:00
Bug 2045468 - Make sure to check the correct browsing context. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305611
Differential Revision: https://phabricator.services.mozilla.com/D311833
-
25b28896
by Emilio Cobos Álvarez at 2026-07-14T08:03:11+02:00
Bug 2045407 - Validate surface format properly. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305381
Differential Revision: https://phabricator.services.mozilla.com/D310858
-
45acf9ab
by Eden Chuang at 2026-07-14T08:03:13+02:00
Bug 2039452 - Validate file:// URIs in PExternalHelperApp against the sending process's remote type. a=RyanVM DONTBUILD
The parent derived the native helper-launch decision from a
content-process supplied aWasFileChannel flag and URI rather than
binding it to the sending process's capabilities.
Stop sending aWasFileChannel over IPC and derive it on the parent from
the actual URI, and reject a file:// URI in PExternalHelperApp from a
process that is not allowed to load local files (mirrors the file://
policy in ValidatePrincipalCouldPotentiallyBeLoadedBy).
Original Revision: https://phabricator.services.mozilla.com/D309577
Differential Revision: https://phabricator.services.mozilla.com/D311929
-
8f8ed0c1
by Matthew Gregan at 2026-07-14T08:03:14+02:00
Bug 2052753 - Update cubeb-pulse-rs to b46defa to reject start() on a draining stream. a=RyanVM DONTBUILD
Backport of upstream cubeb-pulse-rs commit
88194f91c8778fa608a19af7b91306094525595d, carried on the
mozilla/cubeb-pulse-rs esr140 branch.
The backport adapts the error construction to the cubeb-backend version
vendored on this branch (Error::error() rather than Error::Error).
Original Revision: https://phabricator.services.mozilla.com/D310552
Differential Revision: https://phabricator.services.mozilla.com/D311956
-
02abcd52
by Nika Layzell at 2026-07-14T08:03:16+02:00
Bug 1800120 - Part 1: Remove CreateWindowInDifferentProcess, a=RyanVM DONTBUILD
This method is now dead code, as we have shipped fission.autostart on
all platforms since bug 1998306, and CreateWindowInDifferentProcess is
disabled when Fission is disabled.
This is intended to be a fairly straightforward change to remove the
unnecessary IPC call, and does not clean up the implementation to remove
the now-dead codepaths from CommonCreateWindow. That is done in part 2.
Original Revision: https://phabricator.services.mozilla.com/D297450
Differential Revision: https://phabricator.services.mozilla.com/D311910
-
cd03fbe4
by Nika Layzell at 2026-07-14T08:03:17+02:00
Bug 1800120 - Part 2: Remove now-dead parameters in CommonCreateWindow, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D297451
Differential Revision: https://phabricator.services.mozilla.com/D311911
-
11cc5453
by Nika Layzell at 2026-07-14T08:03:19+02:00
Bug 1800120 - Part 3: Update test expectations for window-open-popup-behavior.html, a=RyanVM DONTBUILD
This patch updates the expectations for window-open-popup-behavior.html
on Android to reflect the fact that many of these tests appear to have
only been passing due to Android using CreateWindowInDifferentProcess.
Now that codepath has been removed, the test is now failing more
consistently across platforms.
I also removed the pass cases for linux-nofis, though I don't think we
run that configuration in treeherder anymore off the top of my head.
It appears that we fail this test due to a fundamental mismatch between
our implementation and the WPT. Specifically it appears the test expects
that specifying noopener/noreferrer overrides all other window open
options, and always forces the document to open in a tab, not a popup.
We always respect the specified options even if noopener is set.
Original Revision: https://phabricator.services.mozilla.com/D308619
Differential Revision: https://phabricator.services.mozilla.com/D311912
-
7bce603c
by Ryan Hunt at 2026-07-14T08:03:20+02:00
Bug 2051854 - Clean up StackSlotAllocator. a=RyanVM
Route all height_ increments through a checked incrementHeight() and make
slot allocation fallible.
Original Revision: https://phabricator.services.mozilla.com/D309918
Differential Revision: https://phabricator.services.mozilla.com/D311873