Source Mage code commit list

[George Sherwood <pilot AT beernabeer.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 24 Feb 2007 09:04:09 -0800
Eric Sandall <eric AT sandall.us> wrote:

> >    
> > SOURCE_URL[0]=cvs://:pserver:anonymous AT cvs-mirror.mozilla.org:/cvsroot:mozi
> >lla/client.mk SOURCE_IGNORE=volatile
> >  else
> > -         VERSION=2.0.0.1
> > +         VERSION=2.0.0.2
> >            SOURCE=$SPELL-$VERSION-source.tar.bz2
> >           SOURCE2=${SOURCE}.asc
> >        SOURCE_GPG="firefox.gpg:${SOURCE2}:UPSTREAM_KEY"
> 
> This update includes various security fixes as well:
> MFSA 2007-07  Embedded nulls in location.hostname confuse same-domain
> checks MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2
> buffer overflow MFSA 2007-05 XSS and local file access by opening
> blocked popups MFSA 2007-04 Spoofing using custom cursor and CSS3
> hotspot MFSA 2007-03 Information disclosure through cache collisions
> MFSA 2007-02 Improvements to help protect against Cross-Site
> Scripting attacks MFSA 2007-01 Crashes with evidence of memory
> corruption (rv:1.8.0.10/1.8.1.2)
> 
> See 
> http://www.mozilla.org/projects/security/known-vulnerabilities.html#firefox2.0.0.2
> 
> -sandalle
> 
Right now I am having big problems getting anything to build against
firefox 2.0.0.2.  I don't have the firefox 2.0.0.1 installed, but it
looks like the *.pc files show this:

libdir=/usr/lib/firefox-2.0.0.2
includedir=/usr/include/firefox-2.0.0.2


but the install puts them in:
libdir=/usr/lib/firefox
includedir=/usr/include/firefox

This is causing things building against this firefox to fail. Got to
love the mozilla build system. Still trying to track down the fix.

George
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFF4HHdkVJnfkgKg60RAlf8AJ44XsZby/Rin9yb3CPfnbq8qsA/GACfZX9+
o6gkMvMZPwFPiRahkcIOaJ0=
=jcHu
-----END PGP SIGNATURE-----