63f71ff39bbc6f87008f7222db71d21d5d9d6d95: Backed out changeset b3f742c00ba1 (bug 1103152)
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:04:30 -0800 - rev 217302
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset b3f742c00ba1 (bug 1103152)
6daa62f15a63d2708a8333f4dd0680682bbddf2b: Backed out changeset 64aa4c4d0691 (bug 1103368)
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:04:21 -0800 - rev 217301
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset 64aa4c4d0691 (bug 1103368)
cabeb902de6d41eebb69842ae69e0e073f1a7644: Backed out changeset e737de5b209b (bug 1103368)
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:04:12 -0800 - rev 217300
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset e737de5b209b (bug 1103368)
ae31d26695113dbe96aecb29e3055546526ec88b: Backed out changeset ba1d6ece1bc6 (bug 1103368)
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:04:06 -0800 - rev 217299
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset ba1d6ece1bc6 (bug 1103368)
56ebb99d774eef30488e7fcca268308ed15e0660: Backed out changeset d201babc2e84 (bug 1103368)
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:03:52 -0800 - rev 217298
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset d201babc2e84 (bug 1103368)
c80672f72db67fa665c49642f2a73801b27249d8: Backed out changeset b4b619628d1d (bug 1103368) for b2g build bustage
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 17:03:44 -0800 - rev 217297
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Backed out changeset b4b619628d1d (bug 1103368) for b2g build bustage
6a871ae07d1fc0293f5635b921366b07bddc4e1a: Bug 1102667 - Update failure list.
jdashg <jdashg+github@gmail.com> - Mon, 24 Nov 2014 13:32:46 -0800 - rev 217296
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1102667 - Update failure list.
d95090fbf3dc7d2830e6f022dee1dc982561e759: Bug 1102667 - Fix our copy of OES_texture_float test. - r=kamidphish
jdashg <jdashg+github@gmail.com> - Fri, 21 Nov 2014 19:10:32 -0800 - rev 217295
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1102667 - Fix our copy of OES_texture_float test. - r=kamidphish
e8fb97477d9ef999141b764dd4dd8828f5d3c4d6: Bug 1102667 - Fix our float texture/rb/fb support. - r=kamidphish
jdashg <jdashg+github@gmail.com> - Fri, 21 Nov 2014 15:04:08 -0800 - rev 217294
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1102667 - Fix our float texture/rb/fb support. - r=kamidphish
b93c921507218eebdc0d16fb5d2d88b4b229fb09: Bug 1104301 - Re-disable this test on linux after an accidental reenabling. r=me
Wes Kocher <wkocher@mozilla.com> - Mon, 24 Nov 2014 16:23:51 -0800 - rev 217293
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1104301 - Re-disable this test on linux after an accidental reenabling. r=me
9bc03c937fae6ab4a4858c370c88933ee367bc3c: Bug 1102022 - Increase the SOCKS I/O buffer size to avoid buffer overflows. r=mcmanus
Mike Hommey <mh+mozilla@glandium.org> - Tue, 25 Nov 2014 08:46:59 +0900 - rev 217292
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1102022 - Increase the SOCKS I/O buffer size to avoid buffer overflows. r=mcmanus This also adds static checks that buffer overflows do not sneak in again in the future. Interestingly, this also makes (at least) GCC generate more efficient code. For example, before, writing to the buffer in WriteV5AuthRequest would look like this: mov 0x38(%rbx),%eax mov 0x28(%rbx),%rcx movb $0x5,(%rcx,%rax,1) mov 0x38(%rbx),%eax inc %eax mov %eax,0x38(%rbx) mov 0x28(%rbx),%rcx movb $0x1,(%rcx,%rax,1) mov 0x38(%rbx),%eax inc %eax mov %eax,0x38(%rbx) mov 0x28(%rbx),%rcx movb $0x0,(%rcx,%rax,1) incl 0x38(%rbx) Now it looks like this: mov 0x28(%rbx),%rax movb $0x5,(%rax) movb $0x1,0x1(%rax) movb $0x0,0x2(%rax) movl $0x3,0x38(%rbx)
b4b619628d1d1ffd28413d102f11ee89a7f77819: Bug 1103368, part 5 - Make Class::getProperty and setProperty nullable instead of needing stub functions. Never store stub functions in JSPropertyDescriptors. r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Sat, 22 Nov 2014 12:23:39 -0600 - rev 217291
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103368, part 5 - Make Class::getProperty and setProperty nullable instead of needing stub functions. Never store stub functions in JSPropertyDescriptors. r=bhackett.
d201babc2e846261e50b2e31893e486a4986dee0: Bug 1103368, part 4 - Ban stub getter/setter arguments to js::CheckDefineProperty. r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Sat, 22 Nov 2014 08:43:56 -0600 - rev 217290
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103368, part 4 - Ban stub getter/setter arguments to js::CheckDefineProperty. r=bhackett.
ba1d6ece1bc620b24c14d334c77ebddc7ad08528: Bug 1103368, part 3 - Ban stub getter/setter arguments to JSObject::define{Generic,Property,Element} and js::SetPropertyIgnoringNamedGetter. r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Sat, 22 Nov 2014 08:10:20 -0600 - rev 217289
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103368, part 3 - Ban stub getter/setter arguments to JSObject::define{Generic,Property,Element} and js::SetPropertyIgnoringNamedGetter. r=bhackett.
e737de5b209baa3de255d83efd4cb9874e5c2db5: Bug 1103368, part 2 - Ban stub getter/setter arguments to js::baseops::Define{Property,Generic,Element}, DefineNativeProperty, and DefinePropertyOrElement. r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Fri, 21 Nov 2014 21:07:13 -0600 - rev 217288
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103368, part 2 - Ban stub getter/setter arguments to js::baseops::Define{Property,Generic,Element}, DefineNativeProperty, and DefinePropertyOrElement. r=bhackett.
64aa4c4d0691c200eedf8ef98d697c3d0e17ae8d: Bug 1103368, part 1 - Forbid stub getter/setter arguments to NativeObject::{add,change,put}Property. r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Fri, 21 Nov 2014 19:33:45 -0600 - rev 217287
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103368, part 1 - Forbid stub getter/setter arguments to NativeObject::{add,change,put}Property. r=bhackett.
b3f742c00ba1395e499d859b6374ca6864d4f522: Bug 1103152 - Remove JS_DeletePropertyStub, JS_EnumerateStub, JS_ResolveStub, and JS_ConvertStub. Make five mandatory JSClass hooks optional (nullable). r=bhackett.
Jason Orendorff <jorendorff@mozilla.com> - Fri, 21 Nov 2014 15:14:58 -0600 - rev 217286
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1103152 - Remove JS_DeletePropertyStub, JS_EnumerateStub, JS_ResolveStub, and JS_ConvertStub. Make five mandatory JSClass hooks optional (nullable). r=bhackett.
c69e27e865656ccd9180a82e5ca761e32140860c: Bug 1083211 - Reimplement BaseProxyHandler::set from scratch to follow ES6 draft rev 27 9.1.9. r=bholley.
Jason Orendorff <jorendorff@mozilla.com> - Mon, 13 Oct 2014 16:46:04 -0500 - rev 217285
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1083211 - Reimplement BaseProxyHandler::set from scratch to follow ES6 draft rev 27 9.1.9. r=bholley. The handlers affected by this change are: SandboxProxyHandler XrayWrapper DeadObjectProxy (but not really) In the near future, I will change Proxy::set() to use this code when mHasPrototype is true. Handlers that do not override set() but nonetheless are not affected: * WindowNamedPropertiesHandler. Not affected yet because hasPrototype=true, so set() is never called. However it's worth thinking about this one. It will be changing to use this code soon. * ScriptedIndirectProxyHandler. This class was the original motivation for the old bad code; its old bad behavior has been preserved (by changing it to override set() with the old code). This is necessary, alas -- there's in-tree code depending on these details of Proxy.create()'s behavior.
ff97ac763705dd01700fc605500047a1bd374297: Bug 1097694 - js::HasOwnProperty sanity surgery. r=efaust.
Jason Orendorff <jorendorff@mozilla.com> - Tue, 11 Nov 2014 11:14:48 -0600 - rev 217284
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1097694 - js::HasOwnProperty sanity surgery. r=efaust. * Rename the clownshoes js::HasOwnProperty signature to js::NonProxyLookupOwnProperty, which is what it really is. * Change the sane js::HasOwnProperty signature to use the hasOwn handler when the argument is a proxy, as that's what it's there for. * Change the DirectProxyHandler::hasOwn implementation to use js::HasOwnProperty, so that when target is also a proxy, we end up calling its hasOwn handler. Similar changes in ScriptedDirectProxyHandler.cpp.
059b2c8bffa8d4b3092bfe68032d624abe28f631: Bug 1101170 - Move GMP's LinuxSandboxStarter into plugin-container. r=cpearce r=glandium
Jed Davis <jld@mozilla.com> - Mon, 24 Nov 2014 15:22:14 -0800 - rev 217283
Push 27877 by cbook@mozilla.com at Tue, 25 Nov 2014 11:48:25 +0000
Bug 1101170 - Move GMP's LinuxSandboxStarter into plugin-container. r=cpearce r=glandium
(0) -100000 -30000 -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 +10000 +30000 +100000 +300000 tip