head 1.4; access; symbols pkgsrc-2020Q1:1.3.0.16 pkgsrc-2020Q1-base:1.3 pkgsrc-2019Q4:1.3.0.38 pkgsrc-2019Q4-base:1.3 pkgsrc-2019Q3:1.3.0.34 pkgsrc-2019Q3-base:1.3 pkgsrc-2019Q2:1.3.0.32 pkgsrc-2019Q2-base:1.3 pkgsrc-2019Q1:1.3.0.30 pkgsrc-2019Q1-base:1.3 pkgsrc-2018Q4:1.3.0.28 pkgsrc-2018Q4-base:1.3 pkgsrc-2018Q3:1.3.0.26 pkgsrc-2018Q3-base:1.3 pkgsrc-2018Q2:1.3.0.24 pkgsrc-2018Q2-base:1.3 pkgsrc-2018Q1:1.3.0.22 pkgsrc-2018Q1-base:1.3 pkgsrc-2017Q4:1.3.0.20 pkgsrc-2017Q4-base:1.3 pkgsrc-2017Q3:1.3.0.18 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.14 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.3.0.12 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.10 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.8 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.6 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.4 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.2 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.2.0.6 pkgsrc-2015Q3-base:1.2 pkgsrc-2015Q2:1.2.0.4 pkgsrc-2015Q2-base:1.2 pkgsrc-2015Q1:1.2.0.2 pkgsrc-2015Q1-base:1.2 pkgsrc-2014Q4:1.1.0.12 pkgsrc-2014Q4-base:1.1 pkgsrc-2014Q3:1.1.0.10 pkgsrc-2014Q3-base:1.1 pkgsrc-2014Q2:1.1.0.8 pkgsrc-2014Q2-base:1.1 pkgsrc-2014Q1:1.1.0.6 pkgsrc-2014Q1-base:1.1 pkgsrc-2013Q4:1.1.0.4 pkgsrc-2013Q4-base:1.1 pkgsrc-2013Q3:1.1.0.2 pkgsrc-2013Q3-base:1.1; locks; strict; comment @// @; 1.4 date 2020.05.06.14.34.53; author ryoon; state dead; branches; next 1.3; commitid AlOTfiLltbeFMb7C; 1.3 date 2015.10.02.22.49.36; author ryoon; state Exp; branches; next 1.2; commitid 4NPwQdOyvYkssADy; 1.2 date 2015.02.15.02.11.03; author ryoon; state Exp; branches; next 1.1; commitid X0qR9yjTCtQWX2ay; 1.1 date 2013.08.11.03.18.46; author ryoon; state Exp; branches; next ; commitid GDZSqlFAfPtd7Z0x; desc @@ 1.4 log @seamonkey: Update to 2.53.2 Changelog: SeaMonkey 2.53.2 contains (among other changes) the following major changes relative to SeaMonkey 2.53.1: Scrollbars have been switched over to the native gtk3 theme in bug 1625754. If your theme does not show scrollbar buttons and you would like to see them try editing ~/.config/gtk-3.0/gtk.css and adding the following: * { -GtkScrollbar-has-backward-stepper: 1; -GtkScrollbar-has-forward-stepper: 1; } The download progress dialog has been fixed and is now showing the correct status for downloads. Some downloads may not show the transferred count. This problem is under investigation. SeaMonkey is now translated and available in Finnish and Georgian. Because of website compatibility issues and privacy concerns the Lightning version is no longer appended to the user agent string and has been removed from the preferences dialog. Advanced Layers has been activated on Windows. This should boost performance on some websites. If you experience graphics problems please disable it by setting the pref "layers.mlgpu.enabled" to false. Whether the native app chooser is used in Linux is now controlled via a preference setting in the Helper Applications preference pane. In the Modern theme, popup notifications have improved styling and column headers now display sort direction arrows. The column picker and folder view have been reinstated for the bookmarks panel. Introduced the ability to close all tabs to the right of the current tab. Whether mailnews tabs open in the background is controlled by a separate preference to browser tabs via General Settings section of main Mail & Newsgroups preference pane. Fixed an issue with the recipient being missing when using Reply to Sender and Group button in Newsgroup discussions. SeaMonkey now prevents address books from having duplicate names. SeaMonkey 2.53.2 contains (among other changes) the following major changes relative to SeaMonkey 2.49.5: The Bookmarks Manager has switched its name to Library, and now also includes the History list. When invoking History, the Library will be shown with the History list selected. The extensive modifications were needed because of Mozilla Gecko platform API changes. Download Manager has been migrated to a new API. Although it looks pretty much the same as before, the search option is missing and some other minor details work differently. The previous downloads history is removed during the upgrade. The layout panel was added to the CSS Grid tools. TLS 1.3 is the default SSL version now. The only NPAPI plugin which will work with SeaMonkey 2.53.2 is Flash. Support for other NPAPI plugins like Java and Silverlight has been removed. SeaMonkey now uses a new api for formatting regional data like time and date. Default is to use the application locale of the current SeaMonkey build. If you use a language pack or a different OS formatting this is usually not desired. You can change the formatting from the application locale to the regional settings locale (OS) in the preferences dialog under "Appearance". SeaMonkey 2.53.2 uses the same backend as Firefox and contains the relevant Firefox 60.3 security fixes. @ text @$NetBSD: patch-mozilla_memory_mozalloc_mozalloc__abort.cpp,v 1.3 2015/10/02 22:49:36 ryoon Exp $ --- mozilla/memory/mozalloc/mozalloc_abort.cpp.orig 2015-09-25 07:35:44.000000000 +0000 +++ mozilla/memory/mozalloc/mozalloc_abort.cpp @@@@ -68,7 +68,11 @@@@ void fillAbortMessage(char (&msg)[N], ui // // That segmentation fault will be interpreted as another bug by ASan and as a // result, ASan will just exit(1) instead of aborting. +#if defined(SOLARIS) +void std::abort(void) +#else void abort(void) +#endif { #ifdef MOZ_WIDGET_ANDROID char msg[64] = {}; @ 1.3 log @Update to 2.38 Changelog: Based on xulrunner 41.0 Security fixes: 2015-114 Information disclosure via the High Resolution Time API 2015-113 Memory safety errors in libGLES in the ANGLE graphics library 2015-112 Vulnerabilities found through code inspection 2015-111 Errors in the handling of CORS preflight request headers 2015-110 Dragging and dropping images exposes final URL after redirects 2015-109 JavaScript immutable property enforcement can be bypassed 2015-108 Scripted proxies can access inner window 2015-107 Out-of-bounds read during 2D canvas display on Linux 16-bit color depth systems 2015-106 Use-after-free while manipulating HTML media content 2015-105 Buffer overflow while decoding WebM video 2015-104 Use-after-free with shared workers and IndexedDB 2015-103 URL spoofing in reader mode 2015-102 Crash when using debugger with SavedStacks in JavaScript 2015-101 Buffer overflow in libvpx while parsing vp9 format video 2015-100 Arbitrary file manipulation by local user through Mozilla updater 2015-99 Site attribute spoofing on Android by pasting URL with unknown scheme 2015-98 Out of bounds read in QCMS library with ICC V4 profile attributes 2015-97 Memory leak in mozTCPSocket to servers 2015-96 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3) @ text @d1 1 a1 1 $NetBSD: patch-mozilla_memory_mozalloc_mozalloc__abort.cpp,v 1.2 2015/02/15 02:11:03 ryoon Exp $ @ 1.2 log @Update to 2.32.1 Changelog: What's New in SeaMonkey 2.32.1 Mostly regression fixes, including: MailNews feeds not updating Selected profile in Profile Manager not remembered Opening a bookmark folder in tabs on Linux Troubleshooting Information (about:support) with the Modern theme What's New in SeaMonkey 2.32 SeaMonkey 2.32 contains the following major changes relative to SeaMonkey 2.31: SeaMonkey-specific changes The Spell Check dialog is now resizable. Generational Garbage Collection has been enabled. Mozilla platform changes Improved handling of dynamic styling changes to increase responsiveness. Implemented HTTP Public Key Pinning Extension (for enhanced authentication of encrypted connections). Reduced resource usage for scaled images. Also see Firefox 35 for Developers. Fixed several stability issue Fixed in SeaMonkey 2.32 2015-09 XrayWrapper bypass through DOM objects 2015-08 Delegated OCSP responder certificates failure with id-pkix-ocsp-nocheck extension 2015-06 Read-after-free in WebRTC 2015-05 Read of uninitialized memory in Web Audio 2015-04 Cookie injection through Proxy Authenticate responses 2015-03 sendBeacon requests lack an Origin header 2015-02 Uninitialized memory use during bitmap rendering 2015-01 Miscellaneous memory safety hazards (rv:35.0 / rv:31.4) @ text @d1 1 a1 1 $NetBSD: patch-mozilla_memory_mozalloc_mozalloc__abort.cpp,v 1.1 2013/08/11 03:18:46 ryoon Exp $ d3 1 a3 1 --- mozilla/memory/mozalloc/mozalloc_abort.cpp.orig 2015-02-05 04:39:05.000000000 +0000 d5 4 a8 4 @@@@ -63,7 +63,11 @@@@ void fillAbortMessage(char (&msg)[N], ui // Define abort() here, so that it is used instead of the system abort(). This // lets us control the behavior when aborting, in order to get better results // on *NIX platforms. See mozalloc_abort for details. @ 1.1 log @Update to 2.20 * Merge SunOS patches from www/firefox. Changelog: SeaMonkey-specific changes The Content Security Policy (CSP) 1.0 parser has been enabled. The Mixed Content Blocker has been enabled, blocking insecure active content loads on HTTPS pages. New mail alert information can be customized now (Preferences/Mail & Newsgroups/Notifications). A confirmation prompt has been introduced to protect against accidental permanent data loss when force-deleting messages using Shift+Del. MailNews Save As Template supports multiple selections now. The size on disk is now shown for newsgroup folders. See the changes page for a more complete overview. Mozilla platform changes Added support for scrollbar style in Mac OS X 10.7 and newer. Enabled mixed content blocking to protects users from man-in-the-middle attacks and eavesdroppers on HTTPS pages (learn more). Improved about:memory's functional UI. Enabled DXVA2 on Windows Vista+ to accelerate H.264 video decoding. Simplified interface for notifications of plugin installation. Enabled users to switch the search provider across the entire browser. CSP policies using the standard syntax and semantics will now be enforced. Implemented the HTML5 form control. Added unprefixed requestAnimationFrame. Dropped blink effect from CSS rule text-decoration:blink and completely removed element. Fixed several stability issues. Fixed in SeaMonkey 2.20 MFSA 2013-75 Local Java applets may read contents of local file system MFSA 2013-74 Firefox full and stub installer DLL hijacking MFSA 2013-73 Same-origin bypass with web workers and XMLHttpRequest MFSA 2013-72 Wrong principal used for validating URI for some Javascript components MFSA 2013-71 Further Privilege escalation through Mozilla Updater MFSA 2013-70 Bypass of XrayWrappers using XBL Scopes MFSA 2013-69 CRMF requests allow for code execution and XSS attacks MFSA 2013-68 Document URI misrepresentation and masquerading MFSA 2013-67 Crash during WAV audio file decoding MFSA 2013-66 Buffer overflow in Mozilla Maintenance Service and Mozilla Updater MFSA 2013-65 Buffer underflow when generating CRMF requests MFSA 2013-64 Use after free mutating DOM during SetBody MFSA 2013-63 Miscellaneous memory safety hazards (rv:23.0 / rv:17.0.8) @ text @d1 1 a1 1 $NetBSD$ d3 1 a3 1 --- mozilla/memory/mozalloc/mozalloc_abort.cpp.orig 2013-08-04 03:05:43.000000000 +0000 d5 1 a5 1 @@@@ -34,7 +34,11 @@@@ mozalloc_abort(const char* const msg) d15 2 a16 2 mozalloc_abort("Redirecting call to abort() to mozalloc_abort\n"); } @