87737e44c8b7537b159dfa0422ee599f85caf2c3: Bug 1426526 - Remove references to the old Chromium temporary file prefix. r=gsvelto,florian
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:43 +0000 - rev 488052
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1426526 - Remove references to the old Chromium temporary file prefix. r=gsvelto,florian With the removal of the old Chromium file_util code, we should no longer be using temporary files with names starting with "org.chromium.", so the crash reporter and main thread I/O test no longer need to recognize that prefix. Differential Revision: https://phabricator.services.mozilla.com/D34629
f936472f7576d515b673a4e42811a7daf0f3214d: Bug 1426526 - Delete file_util from ex-Chromium IPC source. r=froydnj
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:42 +0000 - rev 488051
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1426526 - Delete file_util from ex-Chromium IPC source. r=froydnj Depends on D26746 Differential Revision: https://phabricator.services.mozilla.com/D26747
c3ca7014893cd993088b4e6ad5f333ef7eed10a9: Bug 1479960 - Convert MemMapSnapshot to use frozen shared memory. r=kmag
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:40 +0000 - rev 488050
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Convert MemMapSnapshot to use frozen shared memory. r=kmag Depends on D26745 Differential Revision: https://phabricator.services.mozilla.com/D26746
1fa598bf26998154cfc2c189a2a5f7fb862c7640: Bug 1479960 - Give SharedStringMap a magic number so that all zeroes isn't a valid instance. r=kmag
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:38 +0000 - rev 488049
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Give SharedStringMap a magic number so that all zeroes isn't a valid instance. r=kmag There was a strange bug when converting SharedStringMap to use shared memory: on Android, some tests would fail because a pref wasn't set or there was something wrong with an expected error message. The root cause was that mapping ashmem with MAP_PRIVATE results in all zeroes (see bug 1525803), but that was read as a valid SharedStringMap with length 0. To prevent any possible future issues like that, this patch adds a nonzero magic number to the header. It fits into padding on 64-bit and the cost of setting and checking it should be essentially free. Depends on D26744 Differential Revision: https://phabricator.services.mozilla.com/D26745
0f466f2a18c0fcf9e552ea07158e847f88ca9950: Bug 1479960 - Make AutoMemMap not fstat() the mapped object if it doesn't need to. r=kmag
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:36 +0000 - rev 488048
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Make AutoMemMap not fstat() the mapped object if it doesn't need to. r=kmag One problem with using shared memory instead of files for MemMapSnapshot is that AutoMemMap was trying to use fstat() to obtain the object size; that doesn't work with ashmem on Android and was causing problems with the Mac sandbox, but it's not necessary, because we already know the size. This patch changes it to not do that. Depends on D26743 Differential Revision: https://phabricator.services.mozilla.com/D26744
225411558a4eaa436ef6036eee1513427a156413: Bug 1479960 - Add freezing of IPC shared memory. r=froydnj,kmag
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:34 +0000 - rev 488047
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Add freezing of IPC shared memory. r=froydnj,kmag This allows writing to shared memory and then making it read-only before sharing it to other processes, such that a malicious sandboxed process cannot regain write access. This is currently available only in the low-level base::SharedMemory interface. The freeze operation exposes the common subset of read-only shared memory that we can implement on all supported OSes: with some APIs (POSIX shm_open) we can't revoke writeability from existing capabilies, while for others (Android ashmem) we *must* revoke it. Thus, we require that the writeable capability not have been duplicated or shared to another process, and consume it as part of freezing. Also, because in some backends need special handling at creation time, freezeability must be explicitly requested. In particular, this doesn't allow giving an untrusted process read-only access to memory that the original process can write. Note that on MacOS before 10.12 this will use temporary files in order to avoid an OS security bug that allows regaining write access; those OS versions are no longer supported by Apple (but are supported by Firefox). Depends on D26742 Differential Revision: https://phabricator.services.mozilla.com/D26743
ddfa5ff8106195214d932cedc963fe2f9191c5d0: Bug 1479960 - Fix the main thread I/O tests to handle the IPC shared memory changes. r=florian
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:33 +0000 - rev 488046
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Fix the main thread I/O tests to handle the IPC shared memory changes. r=florian The tests for unexpected main thread I/O had exemptions for the specific paths that were being used for shared memory, which would cause it to fail with the changes in this bug. This patch does two things: 1. On Linux, /dev/shm is always tmpfs (a memory filesystem), so it's not going to cause disk I/O, and it's used by glibc to implement the POSIX standard shm_open API. This allows all /dev/shm paths instead of limiting it to a hard-coded prefix. 2. On MacOS, with the patches in this bug, we'll no longer use temporary files for shared memory on current OS versions, but we still need them on older versions to avoid an OS bug (https://crbug.com/project-zero/1671), and they are backed by disk in this case, so we want to allow only the IPC files. However, the path prefix has changed. Differential Revision: https://phabricator.services.mozilla.com/D34628
6da235c5a77c5fc23b11a7456c588974f1de878c: Bug 1479960 - Clean up shared_memory_posix error handling. r=froydnj
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:31 +0000 - rev 488045
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Clean up shared_memory_posix error handling. r=froydnj This uses RAII to handle error-case cleanup in the POSIX backend for SharedMemory::Create, to simplify the complexity that will be added to support freezing. Depends on D26741 Differential Revision: https://phabricator.services.mozilla.com/D26742
bdf7a041928aa4673de020df11c069e0af996d50: Bug 1479960 - Fix max_size in shared_memory_posix. r=froydnj
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:29 +0000 - rev 488044
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Fix max_size in shared_memory_posix. r=froydnj The Unix backend for shared memory needs to keep the mapped size to pass to munmap, while the Windows backend doesn't. Currently it's reusing the max_size field, and then zeroing it when it's unmapped, which breaks the freezing use case. This patch uses a dedicated field for that. Depends on D26740 Differential Revision: https://phabricator.services.mozilla.com/D26741
f814f58d43d66df993d9d9d492ec39c1417b1a3d: Bug 1479960 - Get rid of base::SharedMemory::handle. r=froydnj
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:22 +0000 - rev 488043
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Get rid of base::SharedMemory::handle. r=froydnj Despite the comment saying not to use the "handle" except as an opaque identifier, it is being used to pass the handle to other OS APIs. Direct access to the handle needs to be controlled to make sure freezing is safe, so this patch replaces that with interfaces that are more explicit about ownership and lifetime. Depends on D26739 Differential Revision: https://phabricator.services.mozilla.com/D26740
16d99c5a8a550366c7785edaeadf67c14d7151f1: Bug 1479960 - Remove SHM_ANON support. r=froydnj
Jed Davis <jld@mozilla.com> - Wed, 14 Aug 2019 22:48:20 +0000 - rev 488042
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1479960 - Remove SHM_ANON support. r=froydnj FreeBSD's SHM_ANON is useful for the usual case of shared memory, but it doesn't support freezing. It could be re-added later, but for now it's simplest to remove it (and use named shm instead) while refactoring. Depends on D26738 Differential Revision: https://phabricator.services.mozilla.com/D26739
9b390150ec32771f276b47186e7467bc68d6fb5c: Bug 1573997 - Use correct stride when repainting, r=loganfsmyth.
Brian Hackett <bhackett1024@gmail.com> - Wed, 14 Aug 2019 22:47:51 +0000 - rev 488041
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1573997 - Use correct stride when repainting, r=loganfsmyth. Differential Revision: https://phabricator.services.mozilla.com/D42044
7710c9d9b6b0b2f8f51b0d3d4e9dea3753201b25: Backed out changeset c60ee628dd0e (bug 1571711) for RemoteSandboxBroker related bustages CLOSED TREE
Bogdan Tara <btara@mozilla.com> - Thu, 15 Aug 2019 01:50:01 +0300 - rev 488040
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Backed out changeset c60ee628dd0e (bug 1571711) for RemoteSandboxBroker related bustages CLOSED TREE
77b5eec7b9e5b3f1fdf55bab886cc9391cd8a536: Bug 1573968 - Remove WheelTransaction::Prefs. r=njn
Kristen Wright <kwright@mozilla.com> - Wed, 14 Aug 2019 22:18:59 +0000 - rev 488039
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1573968 - Remove WheelTransaction::Prefs. r=njn All of these prefs are already static prefs, so this removes the varcache pref definitions from WheelTransaction and replaces them with the existing static prefs. Differential Revision: https://phabricator.services.mozilla.com/D42040
c60ee628dd0e2c7ff6d829c5536dc15332735286: Bug 1571711 - Factorize crash handling out of the various process IPC classes r=froydnj
Gabriele Svelto <gsvelto@mozilla.com> - Tue, 13 Aug 2019 21:43:00 +0000 - rev 488038
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1571711 - Factorize crash handling out of the various process IPC classes r=froydnj Differential Revision: https://phabricator.services.mozilla.com/D41657
f48c581ece1bfd0f54d206d9f7d3bdf17789eded: Bug 1569063 - Refactor accessors for flags into BaseScript from JSScript and LazyScript. r=djvj,tcampbell
Chris Fallin <cfallin@mozilla.com> - Wed, 14 Aug 2019 22:07:51 +0000 - rev 488037
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1569063 - Refactor accessors for flags into BaseScript from JSScript and LazyScript. r=djvj,tcampbell Refactor accessors for flags into BaseScript from JSSript and LazyScript, following earlier change by tcampbell@ in a17d8450 to move flag enum definitions to common base. Differential Revision: https://phabricator.services.mozilla.com/D41839
3cf55b7f12f2cb7dfcdbcbcd817d77e298e76fbd: Backed out 22 changesets (bug 1231213) for Browser-chrome failures on /workers/remoteworkers/RemoteWorkerChild.cpp
Dorel Luca <dluca@mozilla.com> - Thu, 15 Aug 2019 01:04:46 +0300 - rev 488036
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Backed out 22 changesets (bug 1231213) for Browser-chrome failures on /workers/remoteworkers/RemoteWorkerChild.cpp Backed out changeset 7e09ad9ceea6 (bug 1231213) Backed out changeset a275eb0b1a19 (bug 1231213) Backed out changeset 906b80778539 (bug 1231213) Backed out changeset 6a40ab6852cb (bug 1231213) Backed out changeset 216591953f97 (bug 1231213) Backed out changeset 1de357bc1921 (bug 1231213) Backed out changeset 8e3fedf6502a (bug 1231213) Backed out changeset 1b9a8b022fce (bug 1231213) Backed out changeset 85df1959eb98 (bug 1231213) Backed out changeset 666bf4260046 (bug 1231213) Backed out changeset 0b03a19a6dc1 (bug 1231213) Backed out changeset 11f010e6d6e7 (bug 1231213) Backed out changeset 6ed55807374f (bug 1231213) Backed out changeset 395062aef2ec (bug 1231213) Backed out changeset bacf8499ba7b (bug 1231213) Backed out changeset bf5d60c7a85a (bug 1231213) Backed out changeset cd434b787ce6 (bug 1231213) Backed out changeset ee4565104217 (bug 1231213) Backed out changeset 581653ef33dd (bug 1231213) Backed out changeset 2d5628a0e52d (bug 1231213) Backed out changeset 3449c2eba4c6 (bug 1231213) Backed out changeset ae221b628899 (bug 1231213)
6e1475b54a6f295293465692e81f2b950cca3584: Bug 1573236 - Part 2: Make the dom.storage_access.auto_grants.delayed work again with the new setup; r=baku
Ehsan Akhgari <ehsan@mozilla.com> - Wed, 14 Aug 2019 21:02:59 +0000 - rev 488035
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1573236 - Part 2: Make the dom.storage_access.auto_grants.delayed work again with the new setup; r=baku Differential Revision: https://phabricator.services.mozilla.com/D41622
a60edc93a43410f04b771c23f2f1e5e32ae9ea67: Bug 1573236 - Part 1: Move the Storage Access API heuristics and telemetry from the front-end to Gecko; r=johannh,baku
Ehsan Akhgari <ehsan@mozilla.com> - Wed, 14 Aug 2019 21:00:51 +0000 - rev 488034
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1573236 - Part 1: Move the Storage Access API heuristics and telemetry from the front-end to Gecko; r=johannh,baku This will allow these heuristics to be used on mobile. This depends on GeckoView supporting a JavaScript module at resource:///modules/BrowserUsageTelemetry.jsm with the interface described in nsIBrowserUsage.idl. Bug 1573238 has been filed in order to implement this module on GeckoView. Differential Revision: https://phabricator.services.mozilla.com/D41621
b8dc5c55123513799253116f3afdb67e52992ec9: Bug 1570821 - limit height for variable tooltip and decrease left padding r=davidwalsh
Krishnal Ciccolella <shellyc23@hotmail.com> - Wed, 14 Aug 2019 20:52:19 +0000 - rev 488033
Push 36434 by cbrindusan@mozilla.com at Thu, 15 Aug 2019 09:44:30 +0000
Bug 1570821 - limit height for variable tooltip and decrease left padding r=davidwalsh Added and if statement to `calculateMaxHeight()` to prevent it from exceeding 250, and decreased the padding of the `.object-node` selector. Differential Revision: https://phabricator.services.mozilla.com/D41478
(0) -300000 -100000 -30000 -10000 -3000 -1000 -300 -100 -50 -20 +20 +50 +100 +300 +1000 +3000 +10000 tip