-
9ff8a03c
by Sebastian Hengst at 2026-07-14T07:40:40+02:00
Bug 2046256 - extend web-platform-tests test certificates until 2027-05-11. r=Sasha,jgraham a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D305756
-
8b50b981
by Release Engineering Landoscript at 2026-07-14T07:40:45+02:00
Automatic version bump NO BUG a=release CLOSED TREE
-
ef5a3a9e
by Release Engineering Landoscript at 2026-07-14T07:40:47+02:00
No Bug - Update configs after merge day operations a=release
IGNORE BROKEN CHANGESETS
CLOSED TREE
-
fea82c0d
by Nicholas Rishel at 2026-07-14T07:40:48+02:00
Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D277134
Differential Revision: https://phabricator.services.mozilla.com/D305398
-
46c5c619
by rperta at 2026-07-14T07:40:49+02:00
Revert "Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM" for causing build bustages DONTBUILD
This reverts commit 7fb19cd315c5b13d32fda38234fa1fd0efa06df6.
-
698df278
by Andrea Marchesini at 2026-07-14T07:40:50+02:00
Bug 2027788 - Ignore the distribution ini file if its global.id is mozillaonline, a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D305913
-
4d6acd89
by Emilio Cobos Álvarez at 2026-07-14T07:40:52+02:00
Bug 2046162 - Remove some redundant pub qualifiers. a=RyanVM DONTBUILD
The enum is not public so this doesn't change behavior but a patch I'm
working on in cbindgen gets a bit confused with this.
Original Revision: https://phabricator.services.mozilla.com/D305678
Differential Revision: https://phabricator.services.mozilla.com/D305831
-
dc80e72b
by Andrew Osmond at 2026-07-14T07:40:53+02:00
Bug 2045730. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305642
Differential Revision: https://phabricator.services.mozilla.com/D305722
-
54969f84
by Alastor Wu at 2026-07-14T07:40:54+02:00
Bug 2043739 - (esr140) Adjust CDM lifetime handling in the Media Foundation CDM IPC path. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306517
-
3ac27d2d
by Alastor Wu at 2026-07-14T07:40:55+02:00
Bug 2045281 - Use the decoded frame format for ffmpeg video chroma plane geometry. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305741
Differential Revision: https://phabricator.services.mozilla.com/D306247
-
bec43ad4
by Leo Tenenbaum at 2026-07-14T07:40:56+02:00
Bug 2045732 - a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305347
Differential Revision: https://phabricator.services.mozilla.com/D306136
-
fd126b78
by Brad Werth at 2026-07-14T07:40:57+02:00
Bug 2040119: Enforce ownership of external image in WebRenderBridgeParent::UpdateSharedExternalImage. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304923
Differential Revision: https://phabricator.services.mozilla.com/D306193
-
29082b2d
by Valentin Gosu at 2026-07-14T07:40:58+02:00
Bug 2036591 - Use origin attributes in FailDelayManager a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304395
Differential Revision: https://phabricator.services.mozilla.com/D306416
-
69e8bb62
by ffxbld at 2026-07-14T07:40:59+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D306766
-
bea5df97
by Tim Huang at 2026-07-14T07:41:00+02:00
Bug 2038587 - Introduce "wsb" to the application reputation check. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D301066
Differential Revision: https://phabricator.services.mozilla.com/D306933
-
c28b2c3d
by Emilio Cobos Álvarez at 2026-07-14T07:41:01+02:00
Bug 2045616 - Fix CharacterDataBuffer OOM handling. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305165
Differential Revision: https://phabricator.services.mozilla.com/D306945
-
49cda768
by Emilio Cobos Álvarez at 2026-07-14T07:41:02+02:00
Bug 2045413 - Deal correctly with <area> element removals. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305124
Differential Revision: https://phabricator.services.mozilla.com/D306939
-
78769f56
by Bob Owen at 2026-07-14T07:41:03+02:00
Bug 2045769 - Check required snapshot shmem size against actual size. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305707
Differential Revision: https://phabricator.services.mozilla.com/D306972
-
7d10c341
by Tooru Fujisawa at 2026-07-14T07:41:04+02:00
Bug 2013415 - Use b-linux-docker-large-amd for searchfox jobs. r=ahal a=NPOTB DONTBUILD
This reduces the time taken by the linux64-searchfox job from 113min to 53min.
Differential Revision: https://phabricator.services.mozilla.com/D283000
-
03d03ebe
by Ryan VanderMeulen at 2026-07-14T07:41:05+02:00
Bug 2013415 - Add b-linux-docker-large-amd worker alias to esr140 config. a=bustage DONTBUILD
-
c4e2ebe4
by Ryan VanderMeulen at 2026-07-14T07:41:06+02:00
Bug 2013415 - Use docker-worker implementation for b-linux-docker-large-amd alias. a=bustage DONTBUILD
-
7863fb5a
by Nicholas Rishel at 2026-07-14T07:41:07+02:00
Bug 2007035 - Migrate Windows Limited Access Feature code to Rust. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D277134
Differential Revision: https://phabricator.services.mozilla.com/D305398
-
bbc716d6
by Tom Schuster at 2026-07-14T07:41:08+02:00
Bug 2044612 - Use ClientInfo for font loading in Worker. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305486
Differential Revision: https://phabricator.services.mozilla.com/D307286
-
0b5660f5
by Tom Schuster at 2026-07-14T07:41:09+02:00
Bug 2041902 - For WebTransport require a ClientInfo. . a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305171
Differential Revision: https://phabricator.services.mozilla.com/D307271
-
b8db7029
by Alastor Wu at 2026-07-14T07:41:10+02:00
Bug 2045756 - Skip a renderer-referenced surface when matching by FFmpeg id in FFmpegVideoFramePool a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305429
Differential Revision: https://phabricator.services.mozilla.com/D307086
-
81ad8910
by Timothy Nikkel at 2026-07-14T07:41:11+02:00
Bug 2045624. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306891
-
9103d7f8
by Masayuki Nakano at 2026-07-14T07:41:12+02:00
Bug 2045405 - Improve the error handling in `PresShell::CompleteMove` a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305544
Differential Revision: https://phabricator.services.mozilla.com/D307163
-
9e14fc50
by Timothy Nikkel at 2026-07-14T07:41:13+02:00
Bug 2045614. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D306900
-
4ceae3b0
by Lee Salzman at 2026-07-14T07:41:14+02:00
Bug 2045625. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305785
Differential Revision: https://phabricator.services.mozilla.com/D307126
-
54e2a23a
by Lee Salzman at 2026-07-14T07:41:15+02:00
Bug 2045185. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307130
-
825e17b1
by Edgar Chen at 2026-07-14T07:41:16+02:00
Bug 2045513 - Make parser update form owner properly; a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305669
Differential Revision: https://phabricator.services.mozilla.com/D307295
-
54ff5613
by az at 2026-07-14T07:41:17+02:00
Bug 2045742 - a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305387
Differential Revision: https://phabricator.services.mozilla.com/D307110
-
10efbdd3
by Andrew McCreight at 2026-07-14T07:41:18+02:00
Bug 2048110 - Add remoteTypes to AboutTabCrashed, LightweightTheme, Megalist. a=RyanVM DONTBUILD
These are only used in a few specific processes.
Original Revision: https://phabricator.services.mozilla.com/D307152
Differential Revision: https://phabricator.services.mozilla.com/D307574
-
0f7666a9
by Leo Tenenbaum at 2026-07-14T07:41:19+02:00
Bug 2047718 - Check for unexpected DOM changes in more places in EnsureNoInvisibleWhiteSpaces. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306863
Differential Revision: https://phabricator.services.mozilla.com/D307559
-
81f45631
by Brad Werth at 2026-07-14T07:41:20+02:00
Bug 2045184: Make SharedContextWebgl destructor prevent resurrection. a=RyanVM
Detaching the WeakPtr early prevents the object from being AddRef'ed by
anything later in the destructor.
Original Revision: https://phabricator.services.mozilla.com/D305720
Differential Revision: https://phabricator.services.mozilla.com/D307604
-
732e7f65
by Ryan VanderMeulen at 2026-07-14T07:41:21+02:00
Bug 2045185 - Fix bustage from stride type mismatch. a=bustage
stride is a plain size_t on esr140 (GetAlignedStride's Maybe<> return type was
never backported), so the .value() call from the backport fails to compile.
-
f7c818b1
by Eden Chuang at 2026-07-14T07:41:22+02:00
Bug 2005113 - Bind FetchBodyBase::mReadableStream to the body stream and rebind it on clone(). . a=RyanVM DONTBUILD
Create the body ReadableStream from the underlying body input stream directly.
When clone() is called before the stream has been read and the underlying body
is not cloneable, clone() replaces the original input stream; repoint the
existing unread native ReadableStream at the replacement so the original stream
is not read from two places. This keeps native bodies native (cancellation of
an unread stream still tears down the channel, and the consume path keeps
reading the body input stream directly) without teeing native byte streams.
This no longer clones the body when creating the ReadableStream, so it does not
buffer the whole body; restore the huge-fetch crashtest expectations that were
disabled to avoid OOMing the 32-bit process.
Original Revision: https://phabricator.services.mozilla.com/D280568
(cherry picked from commit 38e360c0d435c4bd9b0e45b207877610506433f3)
Differential Revision: https://phabricator.services.mozilla.com/D307754
-
bde78cad
by Alastor Wu at 2026-07-14T07:41:23+02:00
Bug 2045424 - (esr140) Constrain the per-sample IV size in the CENC parser and ClearKey decryptor. a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307384
-
0d5cda16
by Alastor Wu at 2026-07-14T07:41:24+02:00
Bug 2045395 - (esr140) Use checked arithmetic for the interleave buffer length in AudioDecoderInputTrack a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307385
-
f07e254d
by Shravan Narayan at 2026-07-14T07:41:25+02:00
Bug 2045149 - Fix rlbox's unnecessary rejection of unaligned transfer buffers a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D307194
Differential Revision: https://phabricator.services.mozilla.com/D307859
-
40a38de4
by ffxbld at 2026-07-14T07:41:26+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D308004
-
2ae11c90
by Jonathan Kew at 2026-07-14T07:41:28+02:00
Bug 2045378 - Validate font descriptor in UnscaledFontFontconfig::CreateFromFontDescriptor. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305662
Differential Revision: https://phabricator.services.mozilla.com/D308002
-
ee07db4d
by Jonathan Kew at 2026-07-14T07:41:29+02:00
Bug 2045771 - Validate kern subtable length. a=pascalc DONTBUILD
As suggested by clauditor.
Original Revision: https://phabricator.services.mozilla.com/D306160
Differential Revision: https://phabricator.services.mozilla.com/D307998
-
8bfb3ee8
by Jan-Niklas Jaeschke at 2026-07-14T07:41:29+02:00
Bug 2045402 - Refactor CrossShadowBoundaryRange::DoSetRange. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305276
Differential Revision: https://phabricator.services.mozilla.com/D308085
-
9930ca0c
by Ben Visness at 2026-07-14T07:41:31+02:00
Bug 2043271. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306329
Differential Revision: https://phabricator.services.mozilla.com/D308069
-
ba76e147
by Henri Sivonen at 2026-07-14T07:41:31+02:00
Bug 2045417. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D305108
Differential Revision: https://phabricator.services.mozilla.com/D307995
-
046b2007
by Timothy Nikkel at 2026-07-14T07:41:33+02:00
Bug 2045775. a=pascalc DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307939
-
9e8a90ef
by Jonathan Kew at 2026-07-14T07:41:34+02:00
Bug 2045612 - Take ownership of the state in RestoreFormControlState. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307613
Differential Revision: https://phabricator.services.mozilla.com/D307827
-
d172f7de
by David Shin at 2026-07-14T07:41:35+02:00
Bug 2045611: a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307076
Differential Revision: https://phabricator.services.mozilla.com/D307776
-
3e7ee821
by Tomislav Jovanovic at 2026-07-14T07:41:36+02:00
Bug 2048267 - Enable WebExtensions WPT tests on ESR140 a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D307614
Differential Revision: https://phabricator.services.mozilla.com/D307920
-
b8fc453c
by Matthew Gregan at 2026-07-14T07:41:37+02:00
Bug 2042033 - Update audioipc to 3f0d4aef7a2c06b0146384592b312a7f47ab7cea. a=pascalc DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D307454
-
ab647faa
by Jan de Mooij at 2026-07-14T07:41:38+02:00
Bug 2045957 - Initialize BaselineFrame return value slot in OnLeaveBaselineFrame. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305464
Differential Revision: https://phabricator.services.mozilla.com/D307470
-
146910a7
by Andrew Osmond at 2026-07-14T07:41:39+02:00
Bug 2045187. a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305653
Differential Revision: https://phabricator.services.mozilla.com/D305719
-
876d8492
by Justin Link at 2026-07-14T07:41:40+02:00
Bug 2028663: Fixed error-checking in WinRegistry a=pascalc DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D291621
Differential Revision: https://phabricator.services.mozilla.com/D308307
-
c85fb073
by Julien Cristau at 2026-07-14T07:41:41+02:00
Bug 2048897 - fix update-verify-config failures on esr for win64-aarch64 DONTBUILD a=RyanVM
That platform was discontinued on esr115 which confuses our scripts.
Set last-watershed to 140.0esr to bypass the issue.
Original Revision: https://phabricator.services.mozilla.com/D307745
Differential Revision: https://phabricator.services.mozilla.com/D307844
-
e34c5c9a
by Randell Jesup at 2026-07-14T07:41:42+02:00
Bug 2031768: Validate Principals in CookieStore a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D294473
Differential Revision: https://phabricator.services.mozilla.com/D308285
-
f4a4901a
by Kai Engert at 2026-07-14T07:41:43+02:00
Bug 2013230 - Use strnlen in mozilla::PrintfTarget::cvt_s. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D280910
Differential Revision: https://phabricator.services.mozilla.com/D308438
-
6d7ef56b
by Masayuki Nakano at 2026-07-14T07:41:44+02:00
Bug 2045619 - Make `CompositionTransaction::DoTransaction` scan the replace start position as far as possible a=RyanVM DONTBUILD
The replace start may be in the following `Text`. Therefore, we should
scan the following `Text` before inserting the new composition string.
Original Revision: https://phabricator.services.mozilla.com/D305783
Differential Revision: https://phabricator.services.mozilla.com/D307458
-
8e407fb3
by Emilio Cobos Álvarez at 2026-07-14T07:41:45+02:00
Bug 2045406 - Validate end of cff dict. a=RyanVM DONTBUILD
Sent upstream in https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967
Original Revision: https://phabricator.services.mozilla.com/D305850
Differential Revision: https://phabricator.services.mozilla.com/D307732
-
14d9f416
by Emilio Cobos Álvarez at 2026-07-14T07:41:46+02:00
Bug 2045406 - Check cff dict operator / operand sizes. a=RyanVM DONTBUILD
Missed this one from the AI report. Also submitted upstream.
Original Revision: https://phabricator.services.mozilla.com/D306885
Differential Revision: https://phabricator.services.mozilla.com/D307733
-
05fc875f
by Jonathan Kew at 2026-07-14T07:41:47+02:00
Bug 2045518 - Ensure gfxFontEntry's mFamilyName field is guarded by mLock. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305176
Differential Revision: https://phabricator.services.mozilla.com/D307514
-
1f7385e0
by Andreas Farre at 2026-07-14T07:41:48+02:00
Bug 2045618 - Make sure to consider idle timeouts when getting id. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305582
Differential Revision: https://phabricator.services.mozilla.com/D308000
-
9599e496
by Jon Coppeard at 2026-07-14T07:41:49+02:00
Bug 2045451 - Prevent allocation of object elemets abutting the end of a nursery chunk a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305804
Differential Revision: https://phabricator.services.mozilla.com/D307781
-
5376770a
by Jan de Mooij at 2026-07-14T07:41:50+02:00
Bug 2045454 - Clamp length of regexp captures array for dollar substitution. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305181
Differential Revision: https://phabricator.services.mozilla.com/D307473
-
9c204e29
by Ryan VanderMeulen at 2026-07-14T07:41:51+02:00
Bug 2045518 - Use FamilyName() accessor in CacheFont's assertion to fix thread-safety bustage. a=bustage
The backport missed converting one direct mFamilyName access in the NS_ASSERTION at the top of
UserFontCache::CacheFont, breaking debug builds under -Wthread-safety-analysis.
-
50758141
by Emilio Cobos Álvarez at 2026-07-14T07:41:52+02:00
Bug 2045604 - Don't leak the static doc via the relevant global of the context. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306772
Differential Revision: https://phabricator.services.mozilla.com/D307727
-
04ded981
by Julian Descottes at 2026-07-14T07:41:53+02:00
Bug 2027519 - [devtools] Use the real source url for sourcemap resolution a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D304524
Differential Revision: https://phabricator.services.mozilla.com/D308464
-
81d1572b
by Calixte Denizet at 2026-07-14T07:41:54+02:00
Bug 2037770 - Honor iframe sandbox flags when handling pdf.js downloads a=RyanVM DONTBUILD
Cherry pick pdf.js changes from https://github.com/mozilla/pdf.js/commit/ece1e2ed0c58eb9641da33259d958fa9122b5804.
Differential Revision: https://phabricator.services.mozilla.com/D308475
-
8c8d8c90
by Lee Salzman at 2026-07-14T07:41:55+02:00
Bug 2047729. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307935
Differential Revision: https://phabricator.services.mozilla.com/D308335
-
10a802fa
by Lee Salzman at 2026-07-14T07:41:56+02:00
Bug 2045741. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306315
Differential Revision: https://phabricator.services.mozilla.com/D308338
-
97899148
by James Teh at 2026-07-14T07:41:57+02:00
Bug 2047957: Ensure cached line start offsets are valid. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307467
Differential Revision: https://phabricator.services.mozilla.com/D308429
-
1c6274b0
by Valentin Gosu at 2026-07-14T07:41:59+02:00
Bug 2048934 - Make mInVisitHeaders checks reentrant a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308013
Differential Revision: https://phabricator.services.mozilla.com/D308471
-
907647ec
by André Bargull at 2026-07-14T07:42:00+02:00
Bug 2045482: Align with hasSpaceForInsts to simplify test case. r=jandem a=RyanVM DONTBUILD
Align with `hasSpaceForInsts` so the test case doesn't need to emit
thirty additional nop instructions.
Differential Revision: https://phabricator.services.mozilla.com/D306374
-
15aca0de
by Julian Seward at 2026-07-14T07:42:01+02:00
Bug 2043035. . a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D303979
Differential Revision: https://phabricator.services.mozilla.com/D308724
-
7e1c0edf
by Jonathan Kew at 2026-07-14T07:42:02+02:00
Bug 2045607 - Hold a strong ref during GetFontAt lookup. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307564
Differential Revision: https://phabricator.services.mozilla.com/D308506
-
f194a890
by Olli Pettay at 2026-07-14T07:42:03+02:00
Bug 2045515, avoid leaking a slot, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305076
Differential Revision: https://phabricator.services.mozilla.com/D308743
-
44108423
by Julian Seward at 2026-07-14T07:42:04+02:00
Bug 2045443. . a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305869
Differential Revision: https://phabricator.services.mozilla.com/D308729
-
e0586f98
by Olli Pettay at 2026-07-14T07:42:05+02:00
Bug 2045414, be consistent with the promise resolve/reject handling, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306588
Differential Revision: https://phabricator.services.mozilla.com/D308735
-
59a449f0
by Jan-Niklas Jaeschke at 2026-07-14T07:42:06+02:00
Bug 2049404 - Remove unused method from nsINode, add mainthread checks. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308201
Differential Revision: https://phabricator.services.mozilla.com/D308748
-
d5135616
by James Teh at 2026-07-14T07:42:07+02:00
Bug 2047716: Ensure cache is valid. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307466
Differential Revision: https://phabricator.services.mozilla.com/D308698
-
43ccbf85
by longsonr at 2026-07-14T07:42:08+02:00
Bug 2049407 Part 1 - Detach observers on canvas destruction a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308288
Differential Revision: https://phabricator.services.mozilla.com/D308731
-
bac95fcc
by Daniel Darnell at 2026-07-14T07:42:09+02:00
Bug 2005200 - Make Thunderbird langpacks depend on correct Thunderbird epoch. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305463
Differential Revision: https://phabricator.services.mozilla.com/D309200
-
4d412f5c
by Mike Hommey at 2026-07-14T07:42:10+02:00
Bug 2029761 - Handle large values returned by strnlen as an error. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D303290
Differential Revision: https://phabricator.services.mozilla.com/D308936
-
700cd4fd
by Ryan VanderMeulen at 2026-07-14T07:42:11+02:00
Bug 2048062 - Run apt-get update before installing build deps in the debian-packages image. a=diannaS
The ubuntu2404 raw image pins an apt snapshot for reproducibility, and the
package lists from the parent image aren't usable in the debian-packages child,
so apt-get install fails to locate any package. Refresh the lists first. The
snapshot pin is inherited by the child image, so the resolved package versions
are unchanged.
Original Revision: https://phabricator.services.mozilla.com/D307183
Differential Revision: https://phabricator.services.mozilla.com/D308925
-
ed967fe1
by Edgar Chen at 2026-07-14T07:42:12+02:00
Bug 2046215 - Associate image elements with form only if the form and the intended parent are in the same tree; a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305733
Differential Revision: https://phabricator.services.mozilla.com/D309120
-
bde0ab88
by Alastor Wu at 2026-07-14T07:42:13+02:00
Bug 2045508 - Reset the create-promise id once the create promise settles in MediaKeys. a=RyanVM (esr140) DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D308879
-
e4b3238b
by Brad Werth at 2026-07-14T07:42:14+02:00
Bug 2045626: Compute range of convolve filter in integer domain. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308096
Differential Revision: https://phabricator.services.mozilla.com/D309197
-
3dfca483
by Artur Iunusov at 2026-07-14T07:42:15+02:00
Bug 2045397 - Cancel the network channel when failing a cached worker script load a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307328
Differential Revision: https://phabricator.services.mozilla.com/D308528
-
2c22e70c
by Andrew McCreight at 2026-07-14T07:42:15+02:00
Bug 2049523 - Make ToJSValue for float consistent with double. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D308323
Differential Revision: https://phabricator.services.mozilla.com/D308559
-
2cc56156
by Lee Salzman at 2026-07-14T07:42:17+02:00
Bug 2049822. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308391
Differential Revision: https://phabricator.services.mozilla.com/D308818
-
b934ab2f
by Lee Salzman at 2026-07-14T07:42:18+02:00
Bug 2025369. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308172
Differential Revision: https://phabricator.services.mozilla.com/D309240
-
86792242
by Lee Salzman at 2026-07-14T07:42:19+02:00
Bug 2050151. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308694
Differential Revision: https://phabricator.services.mozilla.com/D309242
-
71d1a84f
by Chun-Min Chang at 2026-07-14T07:42:20+02:00
Bug 2045415 - Harden buffer sizing in Web Audio decoding a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D309159
-
fc3a13e0
by Lee Salzman at 2026-07-14T07:42:21+02:00
Bug 2049805. a=RyanVM
Differential Revision: https://phabricator.services.mozilla.com/D308859
-
ba3108fa
by ffxbld at 2026-07-14T07:42:23+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D309303
-
07d0b96a
by Sotaro Ikeda at 2026-07-14T07:42:24+02:00
Bug 2049818 a=pascalc
Signed-off-by: Pascal Chevrel <pascal@xxxxxxxxxxx>
-
cf8169e5
by Ryan VanderMeulen at 2026-07-14T07:42:25+02:00
Bug 2051165 - Move ub18 package sources off launchpad.net URLs r=firefox-build-system-reviewers,sergesanspaille a=diannaS
Differential Revision: https://phabricator.services.mozilla.com/D309272
-
e479b581
by Simon Farre at 2026-07-14T07:42:26+02:00
Bug 2045396 - Abort parser that otherwise could trigger the running of script when it shouldn't a=RyanVM DONTBUILD
Only <embed> and <object> teardown seem to finalize parsing, and circumvent script-safety-aware checks which can trigger script running like the bug displays.
nsParser::Terminate is eventually called via nsDocShell::Destroy() also, but this way we ensure the above doesn't happen, provided that NS_BINDING_ABORTED is passed in.
Original Revision: https://phabricator.services.mozilla.com/D305221
Differential Revision: https://phabricator.services.mozilla.com/D309304
-
379ba586
by Valentin Gosu at 2026-07-14T07:42:27+02:00
Bug 2041001 - Drop intermediary HTTPS result when following alias a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308991
Differential Revision: https://phabricator.services.mozilla.com/D309322
-
a0b67044
by Vincent Hilla at 2026-07-14T07:42:28+02:00
Bug 2043820 - Reject _javascript_ URI in nsDocShellLoadState. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305829
Differential Revision: https://phabricator.services.mozilla.com/D309583
-
6175a8b0
by Karl Tomlinson at 2026-07-14T07:42:29+02:00
Bug 2042242 Start fallback driver after queuing cubeb stream init a=RyanVM
This keeps cubeb operations in order and means that no other thread runs the
graph while mStreamName is passed to the cubeb operation thread.
MaybeStartAudioStream() no longer uses Start() to queue the stream init,
because it does not need to and removing this caller allows Start() to more
simply handle its remaining use cases. MaybeStartAudioStream() never starts a
fallback driver nor stops a previous driver because it is called from the
fallback driver loop.
Original Revision: https://phabricator.services.mozilla.com/D305794
Differential Revision: https://phabricator.services.mozilla.com/D309475
-
b9b7ac11
by Andrew McCreight at 2026-07-14T07:42:30+02:00
Bug 2050990 - Call JS_NumberValue in ClientWebGLContext.cpp. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D309205
Differential Revision: https://phabricator.services.mozilla.com/D309810
-
ab90d413
by Chun-Min Chang at 2026-07-14T07:42:31+02:00
Bug 2047723 - Cherry-pick commit f738b1132ec1fd56efc90367898244cf52d9e6a5 for libsoundtouch a=RyanVM DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D309945
-
9cb9334d
by Lee Salzman at 2026-07-14T07:42:32+02:00
Bug 2051666. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309674
Differential Revision: https://phabricator.services.mozilla.com/D309983
-
722bf627
by Lee Salzman at 2026-07-14T07:42:33+02:00
Bug 2049405. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308437
Differential Revision: https://phabricator.services.mozilla.com/D309967
-
b006bf36
by Valentin Gosu at 2026-07-14T07:42:34+02:00
Bug 2050668 - WS: set mDataStarted before dispatching runnable a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308990
Differential Revision: https://phabricator.services.mozilla.com/D309771
-
0847a453
by Andrew McCreight at 2026-07-14T07:42:35+02:00
Bug 2050657 - Fix more floating point setNumber calls. a=RyanVM
Plus a DoubleValue because we might as well fix both EventDispatcher issues
in one patch.
Original Revision: https://phabricator.services.mozilla.com/D308928
Differential Revision: https://phabricator.services.mozilla.com/D309823
-
58ec3e09
by Andrew McCreight at 2026-07-14T07:42:36+02:00
Bug 2050657 - Fixes for setDouble, Float32Value and JS::NumberValue. a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D309191
Differential Revision: https://phabricator.services.mozilla.com/D309824
-
87fe7365
by Andrew McCreight at 2026-07-14T07:42:37+02:00
Bug 2050657 - Ensure UbiNode Node::identifier() is representable. a=RyanVM
Node::identifier() gets used as a JS value in a few places, so we should make
sure that it is a nice happy non-NaN value representable as a double. It looks
like all of the callers are passing in pointers, so it should be fine.
Original Revision: https://phabricator.services.mozilla.com/D309192
Differential Revision: https://phabricator.services.mozilla.com/D309825
-
01d31953
by Arnaud Bienner at 2026-07-14T07:42:38+02:00
Bug 2051285 - Useless reinterpret_cast in EncryptingOutputStream_impl.h a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309361
Differential Revision: https://phabricator.services.mozilla.com/D310141
-
044da35c
by Arnaud Bienner at 2026-07-14T07:42:39+02:00
Bug 2044536 - Quota: make EncryptedBlock::RoundedUpToBasicBlockSize public and use it in EncryptingOutputStream, and propertly clear buffer a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309603
Differential Revision: https://phabricator.services.mozilla.com/D310142
-
0cc7dcbc
by Jens Stutte at 2026-07-14T07:42:40+02:00
Bug 2045510 - Reject snappy CompressedData chunks shorter than the CRC field. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305218
Differential Revision: https://phabricator.services.mozilla.com/D309799
-
50272d3a
by Jens Stutte at 2026-07-14T07:42:41+02:00
Bug 2048795 - Guard access to the GamepadPlatformService singleton by a StaticMutex. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308034
Differential Revision: https://phabricator.services.mozilla.com/D309819
-
e26e8e3e
by Valentin Gosu at 2026-07-14T07:42:42+02:00
Bug 2045833 - Clean up nsUnknownDecoder::OnDataAvailable check a=RyanVM
Original Revision: https://phabricator.services.mozilla.com/D305526
Differential Revision: https://phabricator.services.mozilla.com/D309891
-
c886993c
by Lee Salzman at 2026-07-14T07:42:43+02:00
Bug 2047719. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307948
Differential Revision: https://phabricator.services.mozilla.com/D310173
-
30b753cb
by Jonathan Kew at 2026-07-14T07:42:44+02:00
Bug 2045865 - Use row_bytes rather than bitmap->pitch when copying glyph. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307593
Differential Revision: https://phabricator.services.mozilla.com/D310192
-
bd391cb3
by Matthew Gregan at 2026-07-14T07:42:45+02:00
Bug 2045763. r=cubeb-reviewers,padenot a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D310249
-
3f39be32
by smayya at 2026-07-14T07:42:46+02:00
Bug 2049392 - improve nsStandardURL parsing. n=#necko a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309007
Differential Revision: https://phabricator.services.mozilla.com/D310086
-
32f4f5f9
by Valentin Gosu at 2026-07-14T07:42:47+02:00
Bug 2045875 - Empty authority is not compatible with port a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D306755
Differential Revision: https://phabricator.services.mozilla.com/D310087
-
09f5c12c
by Bob Owen at 2026-07-14T07:42:48+02:00
Bug 2045767 - a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305931
Differential Revision: https://phabricator.services.mozilla.com/D310114
-
4b6b8860
by Randell Jesup at 2026-07-14T07:42:49+02:00
Bug 2045783: Clean up TRRQuery::CompleteLookup a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305279
Differential Revision: https://phabricator.services.mozilla.com/D310241
-
d95e8f5e
by Randell Jesup at 2026-07-14T07:42:50+02:00
Bug 2045783: Add thread-safety checks to TRRQuery a=dmeehan DONTBUILD
Belt-and-suspenders; allows static analyisis
Original Revision: https://phabricator.services.mozilla.com/D305601
Differential Revision: https://phabricator.services.mozilla.com/D310242
-
09073f2c
by Yannis Juglaret at 2026-07-14T07:42:51+02:00
Bug 2045770 - Cap constant-fold allocations. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305921
Differential Revision: https://phabricator.services.mozilla.com/D310264
-
4c008373
by DonalMe at 2026-07-14T07:42:52+02:00
Bug 2051658 a=dmeehan
-
1073dd73
by DonalMe at 2026-07-14T07:42:53+02:00
Revert "Bug 2051658 a=dmeehan" for causing build failures
This reverts commit e44a92232c4f71f420ce59f22e15f5c962f794f2.
-
19111068
by Arnaud Bienner at 2026-07-14T07:42:54+02:00
Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308534
Differential Revision: https://phabricator.services.mozilla.com/D310354
-
887a5625
by Michael Kaply at 2026-07-14T07:42:55+02:00
Bug 2044527 - Normalize the host when matching WebsiteFilter patterns. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305900
Differential Revision: https://phabricator.services.mozilla.com/D310652
-
e0e61a48
by Tom Schuster at 2026-07-14T07:42:56+02:00
Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309362
Differential Revision: https://phabricator.services.mozilla.com/D310359
-
d72f21f0
by Jonathan Kew at 2026-07-14T07:42:57+02:00
Bug 2048801 - Validate fdselect entries before use. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308373
Differential Revision: https://phabricator.services.mozilla.com/D310395
-
fcbb61b8
by Jonathan Kew at 2026-07-14T07:42:58+02:00
Bug 2049398 - Range-check glyph ID. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308374
Differential Revision: https://phabricator.services.mozilla.com/D310396
-
e151ed6c
by Jonathan Kew at 2026-07-14T07:42:59+02:00
Bug 2049399 - Check type1 stack size. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308375
Differential Revision: https://phabricator.services.mozilla.com/D310397
-
497935fb
by ffxbld at 2026-07-14T07:43:00+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310675
-
e005a313
by Mark Banner at 2026-07-14T07:43:01+02:00
Bug 1874712 - Add a keyword for Ecosia. a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310293
-
297993de
by DonalMe at 2026-07-14T07:43:02+02:00
Bug 2044527 - Fix build failure on ESR140 a=bustage
-
ec7aa1b0
by DonalMe at 2026-07-14T07:43:03+02:00
Revert "Bug 2008369 - Validate principal in PContent::LoadURIExternal. a=dmeehan" for causing CI failures on ESR140
This reverts commit 418229151ed0e8261397c2bbcde6112814b14947.
-
2908e88d
by DonalMe at 2026-07-14T07:43:04+02:00
Revert "Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan" for causing CI errors on ESR140
This reverts commit acff26261e5c0c60cb66c290d02ff199ea637cf5.
-
9a4de08f
by Arnaud Bienner at 2026-07-14T07:43:05+02:00
Bug 2045729 - Quota manager: check received stream control is coming from the same Manager/origin a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308534
Differential Revision: https://phabricator.services.mozilla.com/D310354
-
1075a9f1
by smayya at 2026-07-14T07:43:06+02:00
Bug 2045511 - update nsHttpTransaction::Close() handling of NS_BINDING_RETARGETED. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D307751
Differential Revision: https://phabricator.services.mozilla.com/D310586
-
ed81fda3
by James Teh at 2026-07-14T07:43:07+02:00
Bug 2046416: Ensure a hide event never occurs during a split show event. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D306672
Differential Revision: https://phabricator.services.mozilla.com/D310548
-
615146d9
by Sotaro Ikeda at 2026-07-14T07:43:08+02:00
Bug 2051653 a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D309978
Differential Revision: https://phabricator.services.mozilla.com/D310545
-
5f67890f
by Emilio Cobos Álvarez at 2026-07-14T07:43:09+02:00
Bug 2045617 - Add some bounds checks to cairo_cff_font_read_fdselect. a=dmeehan
Attached to https://gitlab.freedesktop.org/cairo/cairo/-/work_items/967
as well.
Original Revision: https://phabricator.services.mozilla.com/D306604
Differential Revision: https://phabricator.services.mozilla.com/D310349
-
7b20e3e8
by Eden Chuang at 2026-07-14T07:43:10+02:00
Bug 2026301 - Synchronize ThreadSafeRequestHandle::mRunnable to fix cross-thread use-after-free a=dmeehan DONTBUILD
mRunnable was a plain RefPtr read on the main thread (GetCacheCreator and the
other accessors) and cleared on the worker thread by ReleaseRequest() with no
synchronization. When the worker's store dropped the last reference to the
shared ScriptLoaderRunnable, the main thread could dereference the already-freed
pointer, producing a heap-use-after-free.
Guard mRunnable with a Mutex (enforced via MOZ_GUARDED_BY). ReleaseRequest() and
the new SetRunnable() mutate it under the lock, releasing the runnable outside
the lock so it is never destroyed while the mutex is held. Each main-thread
accessor copies mRunnable into a local strong reference under the lock and bails
if it was already released. GetCacheCreator() now returns a strong CacheCreator
reference taken under the lock, so the caller keeps it alive across DeleteCache()
even if the runnable is released on the worker thread afterwards.
Original Revision: https://phabricator.services.mozilla.com/D307211
Differential Revision: https://phabricator.services.mozilla.com/D310969
-
bec05ff1
by Emilio Cobos Álvarez at 2026-07-14T07:43:11+02:00
Bug 2045198 - Don't bother checking ancestors for constructed check. a=dmeehan DONTBUILD
Since we don't allow @import, we can't get there with a constructed
ancestor.
Original Revision: https://phabricator.services.mozilla.com/D309844
Differential Revision: https://phabricator.services.mozilla.com/D310859
-
4dd5a131
by Jonathan Kew at 2026-07-14T07:43:12+02:00
Bug 2050368 - Check for end of charstring. a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D308768
Differential Revision: https://phabricator.services.mozilla.com/D310831
-
7a51ebdf
by Randell Jesup at 2026-07-14T07:43:13+02:00
Bug 2045772: Clean up nsStandardURL::Deserialize a=dmeehan DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305274
Differential Revision: https://phabricator.services.mozilla.com/D310198
-
1ed75d9f
by Daniel Holbert at 2026-07-14T07:43:14+02:00
Bug 2048799: Flip polarity of a bounds check in cairo code. a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D307892
Differential Revision: https://phabricator.services.mozilla.com/D310180
-
1d329b4b
by Eitan Isaacson at 2026-07-14T07:43:15+02:00
Bug 2045392 - Don't allow attaching children to outerdoc. a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D305621
-
0fbd3682
by Sotaro Ikeda at 2026-07-14T07:43:16+02:00
Bug 2051658 - for esr140 a=dmeehan DONTBUILD
Differential Revision: https://phabricator.services.mozilla.com/D310958
-
b92df16f
by Valentin Gosu at 2026-07-14T07:43:17+02:00
Bug 2032140 - Verify content process identity when linking background channels a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309038
Differential Revision: https://phabricator.services.mozilla.com/D311187
-
8bc39ef1
by Valentin Gosu at 2026-07-14T07:43:18+02:00
Bug 2043200 - Bind RedirectChannelRegistrar ids to their destination content process a=dmeehan
Original Revision: https://phabricator.services.mozilla.com/D309039
Differential Revision: https://phabricator.services.mozilla.com/D311188
-
fa458fcf
by Atila Butkovits at 2026-07-14T07:43:19+02:00
Revert "Bug 2051658 - for esr140 a=dmeehan DONTBUILD" for causing reftest failures.
This reverts commit 58bbb58a4b533f267000b555474fa3f5f2122c61.
-
8ad8ffda
by Nika Layzell at 2026-07-14T07:43:20+02:00
Bug 2027207 - Part 1: Align validation in TriggerRedirectToRealChannel and RecvNewWindowGlobal better, a=pascalc
This should make TriggerRedirectToRealChannel tighter, to hopefully
match the check in RecvNewWindowGlobal better. While this doesn't add
much in terms of security, it should reduce the risk of us encountering
surprising errors.
Original Revision: https://phabricator.services.mozilla.com/D291061
Differential Revision: https://phabricator.services.mozilla.com/D311158
-
deab802f
by Nika Layzell at 2026-07-14T07:43:21+02:00
Bug 2027207 - Part 2: Handle schemes better in ValidatePrincipalCouldPotentiallyBeLoadedBy, a=pascalc
Previously this logic used `nsIPrincipal::GetScheme`, which returns the
scheme of the URI used to create the principal. This could have
unexpected behaviour for nested URIs like view-source URIs, which have a
view-source: URI scheme, but a non-view-source (e.g. https://) origin.
This patch reworks the logic to instead base the checks off of the
origin's scheme, parsing it out of the origin string.
In addition, the about: URI handling was improved somewhat to have a
better understanding of how process selection for about: URIs happens in
practice by relying on a component of the process isolation logic.
Original Revision: https://phabricator.services.mozilla.com/D291062
Differential Revision: https://phabricator.services.mozilla.com/D311159
-
585c60c4
by Nika Layzell at 2026-07-14T07:43:23+02:00
Bug 2027207 - Part 3: Return IPC_FAIL when principal validation fails, a=pascalc
This entry actually changes the callers to perform principal validation.
This turns the code which previously would only send a telemetry ping to
a crash. I am hopeful that the rate of failures is low enough that this
won't cause an issue, and if it does, I'm hopeful that we'll be able to
figure out the cause of the mismatch.
Original Revision: https://phabricator.services.mozilla.com/D291063
Differential Revision: https://phabricator.services.mozilla.com/D311160
-
f0376f95
by Timothy Nikkel at 2026-07-14T07:43:24+02:00
Bug 2036518. r=gfx-reviewers,lsalzman a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311035
-
b4a89257
by Byron Campen at 2026-07-14T07:43:25+02:00
Bug 2043188: Simplify the buffer handling in RTCEncodedFrameBase. r=sfink a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D310880
-
a8146042
by Timothy Nikkel at 2026-07-14T07:43:26+02:00
Bug 2028004. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D310743
-
f8bb7186
by Randell Jesup at 2026-07-14T07:43:27+02:00
Bug 2029734: Flush before calling sctp_process_init() a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D295148
Differential Revision: https://phabricator.services.mozilla.com/D311133
-
2d6da74b
by Randell Jesup at 2026-07-14T07:43:28+02:00
Bug 2045773: Add usrsctp TSN gap check a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309815
Differential Revision: https://phabricator.services.mozilla.com/D311396
-
e17a56a1
by Timothy Nikkel at 2026-07-14T07:43:29+02:00
Bug 2022635. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311246
-
c0d41848
by Vincent Hilla at 2026-07-14T07:43:30+02:00
Bug 2035756 - Verify srcdoc and data result principal. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309545
Differential Revision: https://phabricator.services.mozilla.com/D311257
-
d35af1a8
by Sotaro Ikeda at 2026-07-14T07:43:31+02:00
Bug 2051658 - for esr140 with D265934 a=dmeehan
Differential Revision: https://phabricator.services.mozilla.com/D310958
-
9022c51d
by James Teh at 2026-07-14T07:43:32+02:00
Bug 2052562: Don't allow moves into a detached subtree. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D310457
Differential Revision: https://phabricator.services.mozilla.com/D311752
-
53fecf21
by Jan de Mooij at 2026-07-14T07:43:33+02:00
Bug 2052207 - Disable OptimizeIteratorIndices optimization. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D310355
Differential Revision: https://phabricator.services.mozilla.com/D311774
-
8cea04be
by Jonathan Kew at 2026-07-14T07:43:34+02:00
Bug 2053576 - Clamp number of components assigned by SetDetailedGlyphs. a=pascalc
(Based on clauditor-suggested patch)
Original Revision: https://phabricator.services.mozilla.com/D311412
Differential Revision: https://phabricator.services.mozilla.com/D311780
-
b93ab09b
by Randell Jesup at 2026-07-14T07:43:34+02:00
Bug 2045848: Avoid avoid re-initting usrsctp a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311578
-
ca735d05
by ffxbld at 2026-07-14T07:43:36+02:00
No Bug, mozilla-esr140 repo-update HSTS HPKP remote-settings tld-suffixes ct-logs - a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311783
-
6d554987
by Timothy Nikkel at 2026-07-14T07:43:37+02:00
Bug 2052841. Don't taint a same-origin response that a service worker substitutes for a cross-origin request. a=pascalc
When a service worker answers a cross-origin request with a same-origin
resource (respondWith(fetch(<same-origin URL>))), the response is delivered as
an internal redirect from the cross-origin request URL to the same-origin
response URL. nsITimedChannel's allRedirectsSameOrigin counts that internal
redirect as a cross-origin hop, so consumers that use it to decide tainting
(image loads, stylesheets, media) treat the resource as cross-origin and taint
it -- even though the bytes are same-origin and should be readable.
Add nsITimedChannel::allRedirectsSameOriginIgnoringInternal, computed like
allRedirectsSameOrigin but ignoring internal (e.g. service-worker response-URL)
redirects, and switch the tainting consumers (imgRequestProxy, the CSS Loader,
and the media resources) to it. Real cross-origin redirects still flip it, so
genuine cross-origin loads (including bounce-backs) still taint. Other users of
allRedirectsSameOrigin (resource timing, Fetch body-access) intentionally keep
the original flag.
Add a service-worker regression test for the same-origin substitution case
(CSS).
Differential Revision: https://phabricator.services.mozilla.com/D311505
-
8d1a814b
by Timothy Nikkel at 2026-07-14T07:43:38+02:00
Bug 2050626. a=pascalc
Differential Revision: https://phabricator.services.mozilla.com/D311507
-
54ba522a
by Vincent Hilla at 2026-07-14T07:43:39+02:00
Bug 2048851 - Clear principalToInherit in LoadPageAsViewSource. a=pascalc
Original Revision: https://phabricator.services.mozilla.com/D309163
Differential Revision: https://phabricator.services.mozilla.com/D311786
-
542aa3e4
by Jon Coppeard at 2026-07-14T07:43:40+02:00
Bug 2046917 - Make implicit edge marking state runtime wide (ESR140) a=pascalc
Currently this is tracked per-marker but the effect should be per-runtime.
There may be multiple markers due to parallel marking.
I couldn't get the testcase to reproduce here either.
Original Revision: https://phabricator.services.mozilla.com/D307221
Differential Revision: https://phabricator.services.mozilla.com/D311837
-
0278ecd0
by Andreas Farre at 2026-07-14T07:43:41+02:00
Bug 2045468 - Make sure to check the correct browsing context. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305611
Differential Revision: https://phabricator.services.mozilla.com/D311833
-
a8580110
by Emilio Cobos Álvarez at 2026-07-14T07:43:42+02:00
Bug 2045407 - Validate surface format properly. a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D305381
Differential Revision: https://phabricator.services.mozilla.com/D310858
-
e7de1788
by Eden Chuang at 2026-07-14T07:43:43+02:00
Bug 2039452 - Validate file:// URIs in PExternalHelperApp against the sending process's remote type. a=RyanVM DONTBUILD
The parent derived the native helper-launch decision from a
content-process supplied aWasFileChannel flag and URI rather than
binding it to the sending process's capabilities.
Stop sending aWasFileChannel over IPC and derive it on the parent from
the actual URI, and reject a file:// URI in PExternalHelperApp from a
process that is not allowed to load local files (mirrors the file://
policy in ValidatePrincipalCouldPotentiallyBeLoadedBy).
Original Revision: https://phabricator.services.mozilla.com/D309577
Differential Revision: https://phabricator.services.mozilla.com/D311929
-
7acd409a
by Matthew Gregan at 2026-07-14T07:43:44+02:00
Bug 2052753 - Update cubeb-pulse-rs to b46defa to reject start() on a draining stream. a=RyanVM DONTBUILD
Backport of upstream cubeb-pulse-rs commit
88194f91c8778fa608a19af7b91306094525595d, carried on the
mozilla/cubeb-pulse-rs esr140 branch.
The backport adapts the error construction to the cubeb-backend version
vendored on this branch (Error::error() rather than Error::Error).
Original Revision: https://phabricator.services.mozilla.com/D310552
Differential Revision: https://phabricator.services.mozilla.com/D311956
-
975c16db
by Nika Layzell at 2026-07-14T07:43:45+02:00
Bug 1800120 - Part 1: Remove CreateWindowInDifferentProcess, a=RyanVM DONTBUILD
This method is now dead code, as we have shipped fission.autostart on
all platforms since bug 1998306, and CreateWindowInDifferentProcess is
disabled when Fission is disabled.
This is intended to be a fairly straightforward change to remove the
unnecessary IPC call, and does not clean up the implementation to remove
the now-dead codepaths from CommonCreateWindow. That is done in part 2.
Original Revision: https://phabricator.services.mozilla.com/D297450
Differential Revision: https://phabricator.services.mozilla.com/D311910
-
684e4aab
by Nika Layzell at 2026-07-14T07:43:46+02:00
Bug 1800120 - Part 2: Remove now-dead parameters in CommonCreateWindow, a=RyanVM DONTBUILD
Original Revision: https://phabricator.services.mozilla.com/D297451
Differential Revision: https://phabricator.services.mozilla.com/D311911
-
adf45eb8
by Nika Layzell at 2026-07-14T07:43:47+02:00
Bug 1800120 - Part 3: Update test expectations for window-open-popup-behavior.html, a=RyanVM DONTBUILD
This patch updates the expectations for window-open-popup-behavior.html
on Android to reflect the fact that many of these tests appear to have
only been passing due to Android using CreateWindowInDifferentProcess.
Now that codepath has been removed, the test is now failing more
consistently across platforms.
I also removed the pass cases for linux-nofis, though I don't think we
run that configuration in treeherder anymore off the top of my head.
It appears that we fail this test due to a fundamental mismatch between
our implementation and the WPT. Specifically it appears the test expects
that specifying noopener/noreferrer overrides all other window open
options, and always forces the document to open in a tab, not a popup.
We always respect the specified options even if noopener is set.
Original Revision: https://phabricator.services.mozilla.com/D308619
Differential Revision: https://phabricator.services.mozilla.com/D311912
-
f917afa7
by Ryan Hunt at 2026-07-14T07:43:48+02:00
Bug 2051854 - Clean up StackSlotAllocator. a=RyanVM
Route all height_ increments through a checked incrementHeight() and make
slot allocation fallible.
Original Revision: https://phabricator.services.mozilla.com/D309918
Differential Revision: https://phabricator.services.mozilla.com/D311873