Skip to Content.
Sympa Menu

sm-commit - [[SM-Commit] ] GIT changes to master grimoire by Pavel Vinogradov (8c9504027209365e5a8e3c9a175b332deab173a7)

sm-commit AT lists.ibiblio.org

Subject: Source Mage code commit list

List archive

Chronological Thread  
  • From: Pavel Vinogradov <scm AT sourcemage.org>
  • To: sm-commit AT lists.ibiblio.org, sm-commit AT lists.sourcemage.org
  • Subject: [[SM-Commit] ] GIT changes to master grimoire by Pavel Vinogradov (8c9504027209365e5a8e3c9a175b332deab173a7)
  • Date: Tue, 14 May 2024 16:10:28 +0000

GIT changes to master grimoire by Pavel Vinogradov <public AT sourcemage.org>:

http/firefox/DETAILS
| 4
http/firefox/HISTORY
| 4
http/firefox/patches/.0001-Don-t-use-build-id.patch.swp
|binary
http/firefox/patches/0026-bmo-1889045-update-sandbox-for-new-syscalls.patch
| 1060 ++++++++++

http/firefox/patches/0026-bmo-1889054-fix-issues-with-non-unified-builds-missing-headers.patch
| 97

http/firefox/patches/0027-bmo-1890593-GetSystemWPADSetting-for-libproxy-enabled-builds.patch
| 37
http/firefox/patches/0028-bmo-1889045-update-sandbox-for-new-syscalls.patch
| 1060 ----------
net/iproute2/DETAILS
| 2
net/iproute2/HISTORY
| 3
9 files changed, 1070 insertions(+), 1197 deletions(-)

New commits:
commit 8c9504027209365e5a8e3c9a175b332deab173a7
Author: Pavel Vinogradov <public AT sourcemage.org>
Commit: Pavel Vinogradov <public AT sourcemage.org>

http/firefox: version 126.0, SECURITY_PATCH++

commit 9958b3d7036f060d63886c3e6ff58da848399388
Author: Pavel Vinogradov <public AT sourcemage.org>
Commit: Pavel Vinogradov <public AT sourcemage.org>

net/iproute2: version 6.9.0

diff --git a/http/firefox/DETAILS b/http/firefox/DETAILS
index bff2a01..b7805bd 100755
--- a/http/firefox/DETAILS
+++ b/http/firefox/DETAILS
@@ -1,6 +1,6 @@
SPELL=firefox
- VERSION=125.0.3
- SECURITY_PATCH=191
+ VERSION=126.0
+ SECURITY_PATCH=192
SOURCE="${SPELL}-${VERSION}.source.tar.xz"
# Watch: http://releases.mozilla.org/pub/firefox/releases/
/releases/([0-9.]+)/

SOURCE_URL[0]="http://releases.mozilla.org/pub/${SPELL}/releases/${VERSION}/source/${SOURCE}";
diff --git a/http/firefox/HISTORY b/http/firefox/HISTORY
index d7cea7b..93fb40c 100644
--- a/http/firefox/HISTORY
+++ b/http/firefox/HISTORY
@@ -1,3 +1,7 @@
+2024-05-14 Pavel Vinogradov <public AT sourcemage.org>
+ * DETAILS: version 126.0, SECURITY_PATCH++
+ * patches/*: updated
+
2024-05-09 Pavel Vinogradov <public AT sourcemage.org>
* patches/*: updated

diff --git a/http/firefox/patches/.0001-Don-t-use-build-id.patch.swp
b/http/firefox/patches/.0001-Don-t-use-build-id.patch.swp
new file mode 100644
index 0000000..e12e123
Binary files /dev/null and
b/http/firefox/patches/.0001-Don-t-use-build-id.patch.swp differ
diff --git
a/http/firefox/patches/0026-bmo-1889045-update-sandbox-for-new-syscalls.patch
b/http/firefox/patches/0026-bmo-1889045-update-sandbox-for-new-syscalls.patch
new file mode 100644
index 0000000..a021f58
--- /dev/null
+++
b/http/firefox/patches/0026-bmo-1889045-update-sandbox-for-new-syscalls.patch
@@ -0,0 +1,1060 @@
+
+# HG changeset patch
+# User Jed Davis <jld AT mozilla.com>
+# Date 1714476333 0
+# Node ID ad8cfda2ed0ca7a54417879e94325796714cade7
+# Parent a87aa27f25e1c1c01e8ac6690c26c7ce412ef2ec
+Bug 1889045 - Update Linux sandbox syscall defs to v6.8. r=gcp
+
+Differential Revision: https://phabricator.services.mozilla.com/D208822
+
+diff --git
a/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch

b/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch
+new file mode 100644
+--- /dev/null
++++
b/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch
+@@ -0,0 +1,469 @@
++commit 142d1560cb5d65b66a4c0c6f427fa2f04150245f
++Author: Jed Davis <jld AT mozilla.com>
++Date: Wed Apr 17 13:52:26 2024 -0700
++
++ Bug 1889045 - Update Linux sandbox syscall defs to v6.8
++
++diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
++index 2224d324383f7..b8efe0da2f897 100644
++---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
+++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
++@@ -3,7 +3,7 @@
++ // found in the LICENSE file.
++
++ /* Constructed by running:
++- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v5.8
+++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v6.8
++ * | gcc -D__BITS_PER_LONG=64 -D__ARCH_WANT_STAT64
-D__ARCH_WANT_SET_GET_RLIMIT -D__ARCH_WANT_SYS_CLONE3 -D__ARCH_WANT_RENAMEAT
-E -dD -
++ * | grep __NR | grep -vE '__NR_arch_specific_syscall|__NR_syscalls' |
sort -n -k 3 | sed -e 's/__NR3264/__NR/g'
++ * | awk '{ if ($2 != $3) { print "#if !defined(" $2 ")\n#define " $2 "
" $3 "\n#endif\n"; } }
++@@ -1182,6 +1182,10 @@
++ #define __NR_clone3 435
++ #endif
++
+++#if !defined(__NR_close_range)
+++#define __NR_close_range 436
+++#endif
+++
++ #if !defined(__NR_openat2)
++ #define __NR_openat2 437
++ #endif
++@@ -1194,4 +1198,88 @@
++ #define __NR_faccessat2 439
++ #endif
++
+++#if !defined(__NR_process_madvise)
+++#define __NR_process_madvise 440
+++#endif
+++
+++#if !defined(__NR_epoll_pwait2)
+++#define __NR_epoll_pwait2 441
+++#endif
+++
+++#if !defined(__NR_mount_setattr)
+++#define __NR_mount_setattr 442
+++#endif
+++
+++#if !defined(__NR_quotactl_fd)
+++#define __NR_quotactl_fd 443
+++#endif
+++
+++#if !defined(__NR_landlock_create_ruleset)
+++#define __NR_landlock_create_ruleset 444
+++#endif
+++
+++#if !defined(__NR_landlock_add_rule)
+++#define __NR_landlock_add_rule 445
+++#endif
+++
+++#if !defined(__NR_landlock_restrict_self)
+++#define __NR_landlock_restrict_self 446
+++#endif
+++
+++#if !defined(__NR_process_mrelease)
+++#define __NR_process_mrelease 448
+++#endif
+++
+++#if !defined(__NR_futex_waitv)
+++#define __NR_futex_waitv 449
+++#endif
+++
+++#if !defined(__NR_set_mempolicy_home_node)
+++#define __NR_set_mempolicy_home_node 450
+++#endif
+++
+++#if !defined(__NR_cachestat)
+++#define __NR_cachestat 451
+++#endif
+++
+++#if !defined(__NR_fchmodat2)
+++#define __NR_fchmodat2 452
+++#endif
+++
+++#if !defined(__NR_map_shadow_stack)
+++#define __NR_map_shadow_stack 453
+++#endif
+++
+++#if !defined(__NR_futex_wake)
+++#define __NR_futex_wake 454
+++#endif
+++
+++#if !defined(__NR_futex_wait)
+++#define __NR_futex_wait 455
+++#endif
+++
+++#if !defined(__NR_futex_requeue)
+++#define __NR_futex_requeue 456
+++#endif
+++
+++#if !defined(__NR_statmount)
+++#define __NR_statmount 457
+++#endif
+++
+++#if !defined(__NR_listmount)
+++#define __NR_listmount 458
+++#endif
+++
+++#if !defined(__NR_lsm_get_self_attr)
+++#define __NR_lsm_get_self_attr 459
+++#endif
+++
+++#if !defined(__NR_lsm_set_self_attr)
+++#define __NR_lsm_set_self_attr 460
+++#endif
+++
+++#if !defined(__NR_lsm_list_modules)
+++#define __NR_lsm_list_modules 461
+++#endif
+++
++ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
++diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
++index 5b7f4e511a61d..06d0a6d5801e1 100644
++---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
+++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
++@@ -3,7 +3,7 @@
++ // found in the LICENSE file.
++
++ /* Constructed by running:
++- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v5.8
+++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v6.8
++ * | grep -vE '^#|^$'
++ * | awk '{ if ($2 != "oabi") { print "#if !defined(__NR_" $3
")\n#define __NR_" $3 " (__NR_SYSCALL_BASE+" $1 ")\n#endif\n"; } }'
++ * */
++@@ -1578,6 +1578,10 @@
++ #define __NR_clone3 (__NR_SYSCALL_BASE+435)
++ #endif
++
+++#if !defined(__NR_close_range)
+++#define __NR_close_range (__NR_SYSCALL_BASE+436)
+++#endif
+++
++ #if !defined(__NR_openat2)
++ #define __NR_openat2 (__NR_SYSCALL_BASE+437)
++ #endif
++@@ -1590,6 +1594,90 @@
++ #define __NR_faccessat2 (__NR_SYSCALL_BASE+439)
++ #endif
++
+++#if !defined(__NR_process_madvise)
+++#define __NR_process_madvise (__NR_SYSCALL_BASE+440)
+++#endif
+++
+++#if !defined(__NR_epoll_pwait2)
+++#define __NR_epoll_pwait2 (__NR_SYSCALL_BASE+441)
+++#endif
+++
+++#if !defined(__NR_mount_setattr)
+++#define __NR_mount_setattr (__NR_SYSCALL_BASE+442)
+++#endif
+++
+++#if !defined(__NR_quotactl_fd)
+++#define __NR_quotactl_fd (__NR_SYSCALL_BASE+443)
+++#endif
+++
+++#if !defined(__NR_landlock_create_ruleset)
+++#define __NR_landlock_create_ruleset (__NR_SYSCALL_BASE+444)
+++#endif
+++
+++#if !defined(__NR_landlock_add_rule)
+++#define __NR_landlock_add_rule (__NR_SYSCALL_BASE+445)
+++#endif
+++
+++#if !defined(__NR_landlock_restrict_self)
+++#define __NR_landlock_restrict_self (__NR_SYSCALL_BASE+446)
+++#endif
+++
+++#if !defined(__NR_process_mrelease)
+++#define __NR_process_mrelease (__NR_SYSCALL_BASE+448)
+++#endif
+++
+++#if !defined(__NR_futex_waitv)
+++#define __NR_futex_waitv (__NR_SYSCALL_BASE+449)
+++#endif
+++
+++#if !defined(__NR_set_mempolicy_home_node)
+++#define __NR_set_mempolicy_home_node (__NR_SYSCALL_BASE+450)
+++#endif
+++
+++#if !defined(__NR_cachestat)
+++#define __NR_cachestat (__NR_SYSCALL_BASE+451)
+++#endif
+++
+++#if !defined(__NR_fchmodat2)
+++#define __NR_fchmodat2 (__NR_SYSCALL_BASE+452)
+++#endif
+++
+++#if !defined(__NR_map_shadow_stack)
+++#define __NR_map_shadow_stack (__NR_SYSCALL_BASE+453)
+++#endif
+++
+++#if !defined(__NR_futex_wake)
+++#define __NR_futex_wake (__NR_SYSCALL_BASE+454)
+++#endif
+++
+++#if !defined(__NR_futex_wait)
+++#define __NR_futex_wait (__NR_SYSCALL_BASE+455)
+++#endif
+++
+++#if !defined(__NR_futex_requeue)
+++#define __NR_futex_requeue (__NR_SYSCALL_BASE+456)
+++#endif
+++
+++#if !defined(__NR_statmount)
+++#define __NR_statmount (__NR_SYSCALL_BASE+457)
+++#endif
+++
+++#if !defined(__NR_listmount)
+++#define __NR_listmount (__NR_SYSCALL_BASE+458)
+++#endif
+++
+++#if !defined(__NR_lsm_get_self_attr)
+++#define __NR_lsm_get_self_attr (__NR_SYSCALL_BASE+459)
+++#endif
+++
+++#if !defined(__NR_lsm_set_self_attr)
+++#define __NR_lsm_set_self_attr (__NR_SYSCALL_BASE+460)
+++#endif
+++
+++#if !defined(__NR_lsm_list_modules)
+++#define __NR_lsm_list_modules (__NR_SYSCALL_BASE+461)
+++#endif
+++
++ // ARM private syscalls.
++ #if !defined(__ARM_NR_BASE)
++ #define __ARM_NR_BASE (__NR_SYSCALL_BASE + 0xF0000)
++diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
++index dc846ee7ad1ab..edcfd05004139 100644
++---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
+++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
++@@ -3,7 +3,7 @@
++ // found in the LICENSE file.
++
++ /* Constructed by running:
++- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v5.8
+++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v6.8
++ * | grep -vE '^#|^$'
++ * | awk '{ if ($2 == "i386") { print "#if !defined(__NR_" $3
")\n#define __NR_" $3 " " $1 "\n#endif\n"; } }'
++ * */
++@@ -1715,6 +1715,10 @@
++ #define __NR_clone3 435
++ #endif
++
+++#if !defined(__NR_close_range)
+++#define __NR_close_range 436
+++#endif
+++
++ #if !defined(__NR_openat2)
++ #define __NR_openat2 437
++ #endif
++@@ -1727,5 +1731,93 @@
++ #define __NR_faccessat2 439
++ #endif
++
+++#if !defined(__NR_process_madvise)
+++#define __NR_process_madvise 440
+++#endif
+++
+++#if !defined(__NR_epoll_pwait2)
+++#define __NR_epoll_pwait2 441
+++#endif
+++
+++#if !defined(__NR_mount_setattr)
+++#define __NR_mount_setattr 442
+++#endif
+++
+++#if !defined(__NR_quotactl_fd)
+++#define __NR_quotactl_fd 443
+++#endif
+++
+++#if !defined(__NR_landlock_create_ruleset)
+++#define __NR_landlock_create_ruleset 444
+++#endif
+++
+++#if !defined(__NR_landlock_add_rule)
+++#define __NR_landlock_add_rule 445
+++#endif
+++
+++#if !defined(__NR_landlock_restrict_self)
+++#define __NR_landlock_restrict_self 446
+++#endif
+++
+++#if !defined(__NR_memfd_secret)
+++#define __NR_memfd_secret 447
+++#endif
+++
+++#if !defined(__NR_process_mrelease)
+++#define __NR_process_mrelease 448
+++#endif
+++
+++#if !defined(__NR_futex_waitv)
+++#define __NR_futex_waitv 449
+++#endif
+++
+++#if !defined(__NR_set_mempolicy_home_node)
+++#define __NR_set_mempolicy_home_node 450
+++#endif
+++
+++#if !defined(__NR_cachestat)
+++#define __NR_cachestat 451
+++#endif
+++
+++#if !defined(__NR_fchmodat2)
+++#define __NR_fchmodat2 452
+++#endif
+++
+++#if !defined(__NR_map_shadow_stack)
+++#define __NR_map_shadow_stack 453
+++#endif
+++
+++#if !defined(__NR_futex_wake)
+++#define __NR_futex_wake 454
+++#endif
+++
+++#if !defined(__NR_futex_wait)
+++#define __NR_futex_wait 455
+++#endif
+++
+++#if !defined(__NR_futex_requeue)
+++#define __NR_futex_requeue 456
+++#endif
+++
+++#if !defined(__NR_statmount)
+++#define __NR_statmount 457
+++#endif
+++
+++#if !defined(__NR_listmount)
+++#define __NR_listmount 458
+++#endif
+++
+++#if !defined(__NR_lsm_get_self_attr)
+++#define __NR_lsm_get_self_attr 459
+++#endif
+++
+++#if !defined(__NR_lsm_set_self_attr)
+++#define __NR_lsm_set_self_attr 460
+++#endif
+++
+++#if !defined(__NR_lsm_list_modules)
+++#define __NR_lsm_list_modules 461
+++#endif
+++
++
++ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
++diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
++index ab51703464aa0..6767d88702f3d 100644
++---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
+++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
++@@ -3,7 +3,7 @@
++ // found in the LICENSE file.
++
++ /* Constructed by running:
++- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v5.8
+++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v6.8
++ * | grep -vE '^#|^$'
++ * | awk '{ if ($2 != "x32") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
++ * */
++@@ -1403,6 +1403,10 @@
++ #define __NR_clone3 435
++ #endif
++
+++#if !defined(__NR_close_range)
+++#define __NR_close_range 436
+++#endif
+++
++ #if !defined(__NR_openat2)
++ #define __NR_openat2 437
++ #endif
++@@ -1415,4 +1419,92 @@
++ #define __NR_faccessat2 439
++ #endif
++
+++#if !defined(__NR_process_madvise)
+++#define __NR_process_madvise 440
+++#endif
+++
+++#if !defined(__NR_epoll_pwait2)
+++#define __NR_epoll_pwait2 441
+++#endif
+++
+++#if !defined(__NR_mount_setattr)
+++#define __NR_mount_setattr 442
+++#endif
+++
+++#if !defined(__NR_quotactl_fd)
+++#define __NR_quotactl_fd 443
+++#endif
+++
+++#if !defined(__NR_landlock_create_ruleset)
+++#define __NR_landlock_create_ruleset 444
+++#endif
+++
+++#if !defined(__NR_landlock_add_rule)
+++#define __NR_landlock_add_rule 445
+++#endif
+++
+++#if !defined(__NR_landlock_restrict_self)
+++#define __NR_landlock_restrict_self 446
+++#endif
+++
+++#if !defined(__NR_memfd_secret)
+++#define __NR_memfd_secret 447
+++#endif
+++
+++#if !defined(__NR_process_mrelease)
+++#define __NR_process_mrelease 448
+++#endif
+++
+++#if !defined(__NR_futex_waitv)
+++#define __NR_futex_waitv 449
+++#endif
+++
+++#if !defined(__NR_set_mempolicy_home_node)
+++#define __NR_set_mempolicy_home_node 450
+++#endif
+++
+++#if !defined(__NR_cachestat)
+++#define __NR_cachestat 451
+++#endif
+++
+++#if !defined(__NR_fchmodat2)
+++#define __NR_fchmodat2 452
+++#endif
+++
+++#if !defined(__NR_map_shadow_stack)
+++#define __NR_map_shadow_stack 453
+++#endif
+++
+++#if !defined(__NR_futex_wake)
+++#define __NR_futex_wake 454
+++#endif
+++
+++#if !defined(__NR_futex_wait)
+++#define __NR_futex_wait 455
+++#endif
+++
+++#if !defined(__NR_futex_requeue)
+++#define __NR_futex_requeue 456
+++#endif
+++
+++#if !defined(__NR_statmount)
+++#define __NR_statmount 457
+++#endif
+++
+++#if !defined(__NR_listmount)
+++#define __NR_listmount 458
+++#endif
+++
+++#if !defined(__NR_lsm_get_self_attr)
+++#define __NR_lsm_get_self_attr 459
+++#endif
+++
+++#if !defined(__NR_lsm_set_self_attr)
+++#define __NR_lsm_set_self_attr 460
+++#endif
+++
+++#if !defined(__NR_lsm_list_modules)
+++#define __NR_lsm_list_modules 461
+++#endif
+++
++ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
+---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
+@@ -1,14 +1,14 @@
+ // Copyright 2014 The Chromium Authors. All rights reserved.
+ // Use of this source code is governed by a BSD-style license that can be
+ // found in the LICENSE file.
+
+ /* Constructed by running:
+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v5.8
++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v6.8
+ * | gcc -D__BITS_PER_LONG=64 -D__ARCH_WANT_STAT64
-D__ARCH_WANT_SET_GET_RLIMIT -D__ARCH_WANT_SYS_CLONE3 -D__ARCH_WANT_RENAMEAT
-E -dD -
+ * | grep __NR | grep -vE '__NR_arch_specific_syscall|__NR_syscalls' |
sort -n -k 3 | sed -e 's/__NR3264/__NR/g'
+ * | awk '{ if ($2 != $3) { print "#if !defined(" $2 ")\n#define " $2 " "
$3 "\n#endif\n"; } }
+ * */
+
+ #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
+ #define SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
+
+@@ -1177,21 +1177,109 @@
+ #if !defined(__NR_pidfd_open)
+ #define __NR_pidfd_open 434
+ #endif
+
+ #if !defined(__NR_clone3)
+ #define __NR_clone3 435
+ #endif
+
++#if !defined(__NR_close_range)
++#define __NR_close_range 436
++#endif
++
+ #if !defined(__NR_openat2)
+ #define __NR_openat2 437
+ #endif
+
+ #if !defined(__NR_pidfd_getfd)
+ #define __NR_pidfd_getfd 438
+ #endif
+
+ #if !defined(__NR_faccessat2)
+ #define __NR_faccessat2 439
+ #endif
+
++#if !defined(__NR_process_madvise)
++#define __NR_process_madvise 440
++#endif
++
++#if !defined(__NR_epoll_pwait2)
++#define __NR_epoll_pwait2 441
++#endif
++
++#if !defined(__NR_mount_setattr)
++#define __NR_mount_setattr 442
++#endif
++
++#if !defined(__NR_quotactl_fd)
++#define __NR_quotactl_fd 443
++#endif
++
++#if !defined(__NR_landlock_create_ruleset)
++#define __NR_landlock_create_ruleset 444
++#endif
++
++#if !defined(__NR_landlock_add_rule)
++#define __NR_landlock_add_rule 445
++#endif
++
++#if !defined(__NR_landlock_restrict_self)
++#define __NR_landlock_restrict_self 446
++#endif
++
++#if !defined(__NR_process_mrelease)
++#define __NR_process_mrelease 448
++#endif
++
++#if !defined(__NR_futex_waitv)
++#define __NR_futex_waitv 449
++#endif
++
++#if !defined(__NR_set_mempolicy_home_node)
++#define __NR_set_mempolicy_home_node 450
++#endif
++
++#if !defined(__NR_cachestat)
++#define __NR_cachestat 451
++#endif
++
++#if !defined(__NR_fchmodat2)
++#define __NR_fchmodat2 452
++#endif
++
++#if !defined(__NR_map_shadow_stack)
++#define __NR_map_shadow_stack 453
++#endif
++
++#if !defined(__NR_futex_wake)
++#define __NR_futex_wake 454
++#endif
++
++#if !defined(__NR_futex_wait)
++#define __NR_futex_wait 455
++#endif
++
++#if !defined(__NR_futex_requeue)
++#define __NR_futex_requeue 456
++#endif
++
++#if !defined(__NR_statmount)
++#define __NR_statmount 457
++#endif
++
++#if !defined(__NR_listmount)
++#define __NR_listmount 458
++#endif
++
++#if !defined(__NR_lsm_get_self_attr)
++#define __NR_lsm_get_self_attr 459
++#endif
++
++#if !defined(__NR_lsm_set_self_attr)
++#define __NR_lsm_set_self_attr 460
++#endif
++
++#if !defined(__NR_lsm_list_modules)
++#define __NR_lsm_list_modules 461
++#endif
++
+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
+---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
+@@ -1,14 +1,14 @@
+ // Copyright (c) 2012 The Chromium Authors. All rights reserved.
+ // Use of this source code is governed by a BSD-style license that can be
+ // found in the LICENSE file.
+
+ /* Constructed by running:
+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v5.8
++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v6.8
+ * | grep -vE '^#|^$'
+ * | awk '{ if ($2 != "oabi") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " (__NR_SYSCALL_BASE+" $1 ")\n#endif\n"; } }'
+ * */
+
+ #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_ARM_LINUX_SYSCALLS_H_
+ #define SANDBOX_LINUX_SYSTEM_HEADERS_ARM_LINUX_SYSCALLS_H_
+
+ #if !defined(__arm__) || !defined(__ARM_EABI__)
+@@ -1573,28 +1573,116 @@
+ #if !defined(__NR_pidfd_open)
+ #define __NR_pidfd_open (__NR_SYSCALL_BASE+434)
+ #endif
+
+ #if !defined(__NR_clone3)
+ #define __NR_clone3 (__NR_SYSCALL_BASE+435)
+ #endif
+
++#if !defined(__NR_close_range)
++#define __NR_close_range (__NR_SYSCALL_BASE+436)
++#endif
++
+ #if !defined(__NR_openat2)
+ #define __NR_openat2 (__NR_SYSCALL_BASE+437)
+ #endif
+
+ #if !defined(__NR_pidfd_getfd)
+ #define __NR_pidfd_getfd (__NR_SYSCALL_BASE+438)
+ #endif
+
+ #if !defined(__NR_faccessat2)
+ #define __NR_faccessat2 (__NR_SYSCALL_BASE+439)
+ #endif
+
++#if !defined(__NR_process_madvise)
++#define __NR_process_madvise (__NR_SYSCALL_BASE+440)
++#endif
++
++#if !defined(__NR_epoll_pwait2)
++#define __NR_epoll_pwait2 (__NR_SYSCALL_BASE+441)
++#endif
++
++#if !defined(__NR_mount_setattr)
++#define __NR_mount_setattr (__NR_SYSCALL_BASE+442)
++#endif
++
++#if !defined(__NR_quotactl_fd)
++#define __NR_quotactl_fd (__NR_SYSCALL_BASE+443)
++#endif
++
++#if !defined(__NR_landlock_create_ruleset)
++#define __NR_landlock_create_ruleset (__NR_SYSCALL_BASE+444)
++#endif
++
++#if !defined(__NR_landlock_add_rule)
++#define __NR_landlock_add_rule (__NR_SYSCALL_BASE+445)
++#endif
++
++#if !defined(__NR_landlock_restrict_self)
++#define __NR_landlock_restrict_self (__NR_SYSCALL_BASE+446)
++#endif
++
++#if !defined(__NR_process_mrelease)
++#define __NR_process_mrelease (__NR_SYSCALL_BASE+448)
++#endif
++
++#if !defined(__NR_futex_waitv)
++#define __NR_futex_waitv (__NR_SYSCALL_BASE+449)
++#endif
++
++#if !defined(__NR_set_mempolicy_home_node)
++#define __NR_set_mempolicy_home_node (__NR_SYSCALL_BASE+450)
++#endif
++
++#if !defined(__NR_cachestat)
++#define __NR_cachestat (__NR_SYSCALL_BASE+451)
++#endif
++
++#if !defined(__NR_fchmodat2)
++#define __NR_fchmodat2 (__NR_SYSCALL_BASE+452)
++#endif
++
++#if !defined(__NR_map_shadow_stack)
++#define __NR_map_shadow_stack (__NR_SYSCALL_BASE+453)
++#endif
++
++#if !defined(__NR_futex_wake)
++#define __NR_futex_wake (__NR_SYSCALL_BASE+454)
++#endif
++
++#if !defined(__NR_futex_wait)
++#define __NR_futex_wait (__NR_SYSCALL_BASE+455)
++#endif
++
++#if !defined(__NR_futex_requeue)
++#define __NR_futex_requeue (__NR_SYSCALL_BASE+456)
++#endif
++
++#if !defined(__NR_statmount)
++#define __NR_statmount (__NR_SYSCALL_BASE+457)
++#endif
++
++#if !defined(__NR_listmount)
++#define __NR_listmount (__NR_SYSCALL_BASE+458)
++#endif
++
++#if !defined(__NR_lsm_get_self_attr)
++#define __NR_lsm_get_self_attr (__NR_SYSCALL_BASE+459)
++#endif
++
++#if !defined(__NR_lsm_set_self_attr)
++#define __NR_lsm_set_self_attr (__NR_SYSCALL_BASE+460)
++#endif
++
++#if !defined(__NR_lsm_list_modules)
++#define __NR_lsm_list_modules (__NR_SYSCALL_BASE+461)
++#endif
++
+ // ARM private syscalls.
+ #if !defined(__ARM_NR_BASE)
+ #define __ARM_NR_BASE (__NR_SYSCALL_BASE + 0xF0000)
+ #endif
+
+ #if !defined(__ARM_NR_breakpoint)
+ #define __ARM_NR_breakpoint (__ARM_NR_BASE+1)
+ #endif
+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
+---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
+@@ -1,14 +1,14 @@
+ // Copyright (c) 2012 The Chromium Authors. All rights reserved.
+ // Use of this source code is governed by a BSD-style license that can be
+ // found in the LICENSE file.
+
+ /* Constructed by running:
+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v5.8
++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v6.8
+ * | grep -vE '^#|^$'
+ * | awk '{ if ($2 == "i386") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
+ * */
+
+ #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
+ #define SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
+
+ #if !defined(__i386__)
+@@ -1710,22 +1710,114 @@
+ #if !defined(__NR_pidfd_open)
+ #define __NR_pidfd_open 434
+ #endif
+
+ #if !defined(__NR_clone3)
+ #define __NR_clone3 435
+ #endif
+
++#if !defined(__NR_close_range)
++#define __NR_close_range 436
++#endif
++
+ #if !defined(__NR_openat2)
+ #define __NR_openat2 437
+ #endif
+
+ #if !defined(__NR_pidfd_getfd)
+ #define __NR_pidfd_getfd 438
+ #endif
+
+ #if !defined(__NR_faccessat2)
+ #define __NR_faccessat2 439
+ #endif
+
++#if !defined(__NR_process_madvise)
++#define __NR_process_madvise 440
++#endif
++
++#if !defined(__NR_epoll_pwait2)
++#define __NR_epoll_pwait2 441
++#endif
++
++#if !defined(__NR_mount_setattr)
++#define __NR_mount_setattr 442
++#endif
++
++#if !defined(__NR_quotactl_fd)
++#define __NR_quotactl_fd 443
++#endif
++
++#if !defined(__NR_landlock_create_ruleset)
++#define __NR_landlock_create_ruleset 444
++#endif
++
++#if !defined(__NR_landlock_add_rule)
++#define __NR_landlock_add_rule 445
++#endif
++
++#if !defined(__NR_landlock_restrict_self)
++#define __NR_landlock_restrict_self 446
++#endif
++
++#if !defined(__NR_memfd_secret)
++#define __NR_memfd_secret 447
++#endif
++
++#if !defined(__NR_process_mrelease)
++#define __NR_process_mrelease 448
++#endif
++
++#if !defined(__NR_futex_waitv)
++#define __NR_futex_waitv 449
++#endif
++
++#if !defined(__NR_set_mempolicy_home_node)
++#define __NR_set_mempolicy_home_node 450
++#endif
++
++#if !defined(__NR_cachestat)
++#define __NR_cachestat 451
++#endif
++
++#if !defined(__NR_fchmodat2)
++#define __NR_fchmodat2 452
++#endif
++
++#if !defined(__NR_map_shadow_stack)
++#define __NR_map_shadow_stack 453
++#endif
++
++#if !defined(__NR_futex_wake)
++#define __NR_futex_wake 454
++#endif
++
++#if !defined(__NR_futex_wait)
++#define __NR_futex_wait 455
++#endif
++
++#if !defined(__NR_futex_requeue)
++#define __NR_futex_requeue 456
++#endif
++
++#if !defined(__NR_statmount)
++#define __NR_statmount 457
++#endif
++
++#if !defined(__NR_listmount)
++#define __NR_listmount 458
++#endif
++
++#if !defined(__NR_lsm_get_self_attr)
++#define __NR_lsm_get_self_attr 459
++#endif
++
++#if !defined(__NR_lsm_set_self_attr)
++#define __NR_lsm_set_self_attr 460
++#endif
++
++#if !defined(__NR_lsm_list_modules)
++#define __NR_lsm_list_modules 461
++#endif
++
+
+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
+---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
+@@ -1,14 +1,14 @@
+ // Copyright (c) 2012 The Chromium Authors. All rights reserved.
+ // Use of this source code is governed by a BSD-style license that can be
+ // found in the LICENSE file.
+
+ /* Constructed by running:
+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v5.8
++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v6.8
+ * | grep -vE '^#|^$'
+ * | awk '{ if ($2 != "x32") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
+ * */
+
+ #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
+ #define SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
+
+ #if !defined(__x86_64__)
+@@ -1398,21 +1398,113 @@
+ #if !defined(__NR_pidfd_open)
+ #define __NR_pidfd_open 434
+ #endif
+
+ #if !defined(__NR_clone3)
+ #define __NR_clone3 435
+ #endif
+
++#if !defined(__NR_close_range)
++#define __NR_close_range 436
++#endif
++
+ #if !defined(__NR_openat2)
+ #define __NR_openat2 437
+ #endif
+
+ #if !defined(__NR_pidfd_getfd)
+ #define __NR_pidfd_getfd 438
+ #endif
+
+ #if !defined(__NR_faccessat2)
+ #define __NR_faccessat2 439
+ #endif
+
++#if !defined(__NR_process_madvise)
++#define __NR_process_madvise 440
++#endif
++
++#if !defined(__NR_epoll_pwait2)
++#define __NR_epoll_pwait2 441
++#endif
++
++#if !defined(__NR_mount_setattr)
++#define __NR_mount_setattr 442
++#endif
++
++#if !defined(__NR_quotactl_fd)
++#define __NR_quotactl_fd 443
++#endif
++
++#if !defined(__NR_landlock_create_ruleset)
++#define __NR_landlock_create_ruleset 444
++#endif
++
++#if !defined(__NR_landlock_add_rule)
++#define __NR_landlock_add_rule 445
++#endif
++
++#if !defined(__NR_landlock_restrict_self)
++#define __NR_landlock_restrict_self 446
++#endif
++
++#if !defined(__NR_memfd_secret)
++#define __NR_memfd_secret 447
++#endif
++
++#if !defined(__NR_process_mrelease)
++#define __NR_process_mrelease 448
++#endif
++
++#if !defined(__NR_futex_waitv)
++#define __NR_futex_waitv 449
++#endif
++
++#if !defined(__NR_set_mempolicy_home_node)
++#define __NR_set_mempolicy_home_node 450
++#endif
++
++#if !defined(__NR_cachestat)
++#define __NR_cachestat 451
++#endif
++
++#if !defined(__NR_fchmodat2)
++#define __NR_fchmodat2 452
++#endif
++
++#if !defined(__NR_map_shadow_stack)
++#define __NR_map_shadow_stack 453
++#endif
++
++#if !defined(__NR_futex_wake)
++#define __NR_futex_wake 454
++#endif
++
++#if !defined(__NR_futex_wait)
++#define __NR_futex_wait 455
++#endif
++
++#if !defined(__NR_futex_requeue)
++#define __NR_futex_requeue 456
++#endif
++
++#if !defined(__NR_statmount)
++#define __NR_statmount 457
++#endif
++
++#if !defined(__NR_listmount)
++#define __NR_listmount 458
++#endif
++
++#if !defined(__NR_lsm_get_self_attr)
++#define __NR_lsm_get_self_attr 459
++#endif
++
++#if !defined(__NR_lsm_set_self_attr)
++#define __NR_lsm_set_self_attr 460
++#endif
++
++#if !defined(__NR_lsm_list_modules)
++#define __NR_lsm_list_modules 461
++#endif
++
+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
+
+# HG changeset patch
+# User Jed Davis <jld AT mozilla.com>
+# Date 1714476334 0
+# Node ID 72b15a00b128e74ff180ddc564c987b6482a0831
+# Parent ad8cfda2ed0ca7a54417879e94325796714cade7
+Bug 1889045 - Update sandbox policies for `epoll_pwait2`. r=gcp
+
+Note that this can't easily be unit-tested, because the tests can't
+distinguish between the real `ENOSYS` from lack of kernel support and
+the fake `ENOSYS` from the sandbox.
+
+Differential Revision: https://phabricator.services.mozilla.com/D208823
+
+diff --git a/security/sandbox/linux/SandboxFilterUtil.h
b/security/sandbox/linux/SandboxFilterUtil.h
+--- a/security/sandbox/linux/SandboxFilterUtil.h
++++ b/security/sandbox/linux/SandboxFilterUtil.h
+@@ -213,19 +213,22 @@ class SandboxPolicyBase : public sandbox
+ case __NR_epoll_create1
+ #else
+ # define CASES_FOR_epoll_create case __NR_epoll_create1
+ #endif
+
+ #ifdef __NR_epoll_wait
+ # define CASES_FOR_epoll_wait \
+ case __NR_epoll_wait: \
+- case __NR_epoll_pwait
++ case __NR_epoll_pwait: \
++ case __NR_epoll_pwait2
+ #else
+-# define CASES_FOR_epoll_wait case __NR_epoll_pwait
++# define CASES_FOR_epoll_wait \
++ case __NR_epoll_pwait: \
++ case __NR_epoll_pwait2
+ #endif
+
+ #ifdef __NR_pipe
+ # define CASES_FOR_pipe \
+ case __NR_pipe: \
+ case __NR_pipe2
+ #else
+ # define CASES_FOR_pipe case __NR_pipe2
+
+
diff --git
a/http/firefox/patches/0026-bmo-1889054-fix-issues-with-non-unified-builds-missing-headers.patch

b/http/firefox/patches/0026-bmo-1889054-fix-issues-with-non-unified-builds-missing-headers.patch
deleted file mode 100644
index 09ecf35..0000000
---
a/http/firefox/patches/0026-bmo-1889054-fix-issues-with-non-unified-builds-missing-headers.patch
+++ /dev/null
@@ -1,97 +0,0 @@
-
-# HG changeset patch
-# User Amit Prakash Ambasta <amit.prakash.ambasta AT gmail.com>
-# Date 1712664593 0
-# Node ID 2fc58e52651018d6739b7449a60c1a176218a39c
-# Parent 9f30ff6007c51338920625f326f3dd40e9cca652
-Bug 1889054 - Fix issues with non-unified builds missing header inclusions.
r=emilio
-
-Signed-off-by: Amit Prakash Ambasta <amit.prakash.ambasta AT gmail.com>
-
-Differential Revision: https://phabricator.services.mozilla.com/D207004
-
-diff --git a/accessible/html/HTMLSelectAccessible.cpp
b/accessible/html/HTMLSelectAccessible.cpp
---- a/accessible/html/HTMLSelectAccessible.cpp
-+++ b/accessible/html/HTMLSelectAccessible.cpp
-@@ -1,16 +1,17 @@
- /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 2
-*- */
- /* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
- #include "HTMLSelectAccessible.h"
-
- #include "LocalAccessible-inl.h"
-+#include "DocAccessible-inl.h"
- #include "nsAccessibilityService.h"
- #include "nsAccUtils.h"
- #include "DocAccessible.h"
- #include "mozilla/a11y/Role.h"
- #include "States.h"
-
- #include "nsCOMPtr.h"
- #include "mozilla/dom/HTMLOptionElement.h"
-diff --git a/accessible/html/HTMLTableAccessible.cpp
b/accessible/html/HTMLTableAccessible.cpp
---- a/accessible/html/HTMLTableAccessible.cpp
-+++ b/accessible/html/HTMLTableAccessible.cpp
-@@ -7,16 +7,17 @@
-
- #include <stdint.h>
-
- #include "nsAccessibilityService.h"
- #include "AccAttributes.h"
- #include "ARIAMap.h"
- #include "CacheConstants.h"
- #include "LocalAccessible-inl.h"
-+#include "DocAccessible-inl.h"
- #include "nsTextEquivUtils.h"
- #include "Relation.h"
- #include "mozilla/a11y/Role.h"
- #include "States.h"
-
- #include "mozilla/a11y/TableAccessible.h"
- #include "mozilla/a11y/TableCellAccessible.h"
- #include "mozilla/Assertions.h"
-diff --git a/intl/components/src/TimeZone.h b/intl/components/src/TimeZone.h
---- a/intl/components/src/TimeZone.h
-+++ b/intl/components/src/TimeZone.h
-@@ -28,16 +28,17 @@
-
- #include "mozilla/Assertions.h"
- #include "mozilla/Casting.h"
- #include "mozilla/intl/ICU4CGlue.h"
- #include "mozilla/intl/ICUError.h"
- #include "mozilla/Maybe.h"
- #include "mozilla/Result.h"
- #include "mozilla/Span.h"
-+#include "mozilla/Try.h"
- #include "mozilla/UniquePtr.h"
-
- namespace mozilla::intl {
-
- /**
- * This component is a Mozilla-focused API for working with time zones in
- * internationalization code. It is used in coordination with other
operations
- * such as datetime formatting.
-diff --git a/widget/gtk/GtkCompositorWidget.cpp
b/widget/gtk/GtkCompositorWidget.cpp
---- a/widget/gtk/GtkCompositorWidget.cpp
-+++ b/widget/gtk/GtkCompositorWidget.cpp
-@@ -2,16 +2,17 @@
- /* This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
-
- #include "GtkCompositorWidget.h"
-
- #include "mozilla/gfx/gfxVars.h"
- #include "mozilla/layers/CompositorThread.h"
-+#include "mozilla/WidgetUtilsGtk.h"
- #include "mozilla/widget/InProcessCompositorWidget.h"
- #include "mozilla/widget/PlatformWidgetTypes.h"
- #include "nsWindow.h"
-
- #ifdef MOZ_X11
- # include "mozilla/X11Util.h"
- #endif
-
-
diff --git
a/http/firefox/patches/0027-bmo-1890593-GetSystemWPADSetting-for-libproxy-enabled-builds.patch

b/http/firefox/patches/0027-bmo-1890593-GetSystemWPADSetting-for-libproxy-enabled-builds.patch
deleted file mode 100644
index e0c5a13..0000000
---
a/http/firefox/patches/0027-bmo-1890593-GetSystemWPADSetting-for-libproxy-enabled-builds.patch
+++ /dev/null
@@ -1,37 +0,0 @@
-
-# HG changeset patch
-# User Christoph Moench-Tegeder <cmt AT burggraben.net>
-# Date 1712783081 0
-# Node ID 15006906e885bda833a3f867cfd8ced955b3b5d5
-# Parent bc425d90bbe9987cc754323772553d4be3e6de83
-Bug 1890593 - GetSystemWPADSetting for libproxy-enabled builds r=jesup
-
-In #621429 a call to nsUnixSystemProxySettings::GetSystemWPADSetting()
-was added, but that function is not available for builds with
-MOZ_ENABLE_LIBPROXY. The funtion is trivial enough to just
-copy it across - else there'd more boilerplate than actual code.
-
-Differential Revision: https://phabricator.services.mozilla.com/D207197
-
-diff --git a/toolkit/system/unixproxy/nsLibProxySettings.cpp
b/toolkit/system/unixproxy/nsLibProxySettings.cpp
---- a/toolkit/system/unixproxy/nsLibProxySettings.cpp
-+++ b/toolkit/system/unixproxy/nsLibProxySettings.cpp
-@@ -94,11 +94,17 @@ nsresult nsUnixSystemProxySettings::GetP
-
- c++;
- }
-
- free(proxyArray);
- return NS_OK;
- }
-
-+NS_IMETHODIMP
-+nsUnixSystemProxySettings::GetSystemWPADSetting(bool* aSystemWPADSetting) {
-+ *aSystemWPADSetting = false;
-+ return NS_OK;
-+}
-+
- NS_IMPL_COMPONENT_FACTORY(nsUnixSystemProxySettings) {
- return do_AddRef(new nsUnixSystemProxySettings()).downcast<nsISupports>();
- }
-
diff --git
a/http/firefox/patches/0028-bmo-1889045-update-sandbox-for-new-syscalls.patch
b/http/firefox/patches/0028-bmo-1889045-update-sandbox-for-new-syscalls.patch
deleted file mode 100644
index a021f58..0000000
---
a/http/firefox/patches/0028-bmo-1889045-update-sandbox-for-new-syscalls.patch
+++ /dev/null
@@ -1,1060 +0,0 @@
-
-# HG changeset patch
-# User Jed Davis <jld AT mozilla.com>
-# Date 1714476333 0
-# Node ID ad8cfda2ed0ca7a54417879e94325796714cade7
-# Parent a87aa27f25e1c1c01e8ac6690c26c7ce412ef2ec
-Bug 1889045 - Update Linux sandbox syscall defs to v6.8. r=gcp
-
-Differential Revision: https://phabricator.services.mozilla.com/D208822
-
-diff --git
a/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch

b/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch
-new file mode 100644
---- /dev/null
-+++
b/security/sandbox/chromium-shim/patches/with_update/chromium_syscalls_6_8_update.patch
-@@ -0,0 +1,469 @@
-+commit 142d1560cb5d65b66a4c0c6f427fa2f04150245f
-+Author: Jed Davis <jld AT mozilla.com>
-+Date: Wed Apr 17 13:52:26 2024 -0700
-+
-+ Bug 1889045 - Update Linux sandbox syscall defs to v6.8
-+
-+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
-+index 2224d324383f7..b8efe0da2f897 100644
-+---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
-++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
-+@@ -3,7 +3,7 @@
-+ // found in the LICENSE file.
-+
-+ /* Constructed by running:
-+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v5.8
-++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v6.8
-+ * | gcc -D__BITS_PER_LONG=64 -D__ARCH_WANT_STAT64
-D__ARCH_WANT_SET_GET_RLIMIT -D__ARCH_WANT_SYS_CLONE3 -D__ARCH_WANT_RENAMEAT
-E -dD -
-+ * | grep __NR | grep -vE '__NR_arch_specific_syscall|__NR_syscalls' |
sort -n -k 3 | sed -e 's/__NR3264/__NR/g'
-+ * | awk '{ if ($2 != $3) { print "#if !defined(" $2 ")\n#define " $2 "
" $3 "\n#endif\n"; } }
-+@@ -1182,6 +1182,10 @@
-+ #define __NR_clone3 435
-+ #endif
-+
-++#if !defined(__NR_close_range)
-++#define __NR_close_range 436
-++#endif
-++
-+ #if !defined(__NR_openat2)
-+ #define __NR_openat2 437
-+ #endif
-+@@ -1194,4 +1198,88 @@
-+ #define __NR_faccessat2 439
-+ #endif
-+
-++#if !defined(__NR_process_madvise)
-++#define __NR_process_madvise 440
-++#endif
-++
-++#if !defined(__NR_epoll_pwait2)
-++#define __NR_epoll_pwait2 441
-++#endif
-++
-++#if !defined(__NR_mount_setattr)
-++#define __NR_mount_setattr 442
-++#endif
-++
-++#if !defined(__NR_quotactl_fd)
-++#define __NR_quotactl_fd 443
-++#endif
-++
-++#if !defined(__NR_landlock_create_ruleset)
-++#define __NR_landlock_create_ruleset 444
-++#endif
-++
-++#if !defined(__NR_landlock_add_rule)
-++#define __NR_landlock_add_rule 445
-++#endif
-++
-++#if !defined(__NR_landlock_restrict_self)
-++#define __NR_landlock_restrict_self 446
-++#endif
-++
-++#if !defined(__NR_process_mrelease)
-++#define __NR_process_mrelease 448
-++#endif
-++
-++#if !defined(__NR_futex_waitv)
-++#define __NR_futex_waitv 449
-++#endif
-++
-++#if !defined(__NR_set_mempolicy_home_node)
-++#define __NR_set_mempolicy_home_node 450
-++#endif
-++
-++#if !defined(__NR_cachestat)
-++#define __NR_cachestat 451
-++#endif
-++
-++#if !defined(__NR_fchmodat2)
-++#define __NR_fchmodat2 452
-++#endif
-++
-++#if !defined(__NR_map_shadow_stack)
-++#define __NR_map_shadow_stack 453
-++#endif
-++
-++#if !defined(__NR_futex_wake)
-++#define __NR_futex_wake 454
-++#endif
-++
-++#if !defined(__NR_futex_wait)
-++#define __NR_futex_wait 455
-++#endif
-++
-++#if !defined(__NR_futex_requeue)
-++#define __NR_futex_requeue 456
-++#endif
-++
-++#if !defined(__NR_statmount)
-++#define __NR_statmount 457
-++#endif
-++
-++#if !defined(__NR_listmount)
-++#define __NR_listmount 458
-++#endif
-++
-++#if !defined(__NR_lsm_get_self_attr)
-++#define __NR_lsm_get_self_attr 459
-++#endif
-++
-++#if !defined(__NR_lsm_set_self_attr)
-++#define __NR_lsm_set_self_attr 460
-++#endif
-++
-++#if !defined(__NR_lsm_list_modules)
-++#define __NR_lsm_list_modules 461
-++#endif
-++
-+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
-+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
-+index 5b7f4e511a61d..06d0a6d5801e1 100644
-+---
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
-++++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
-+@@ -3,7 +3,7 @@
-+ // found in the LICENSE file.
-+
-+ /* Constructed by running:
-+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v5.8
-++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v6.8
-+ * | grep -vE '^#|^$'
-+ * | awk '{ if ($2 != "oabi") { print "#if !defined(__NR_" $3
")\n#define __NR_" $3 " (__NR_SYSCALL_BASE+" $1 ")\n#endif\n"; } }'
-+ * */
-+@@ -1578,6 +1578,10 @@
-+ #define __NR_clone3 (__NR_SYSCALL_BASE+435)
-+ #endif
-+
-++#if !defined(__NR_close_range)
-++#define __NR_close_range (__NR_SYSCALL_BASE+436)
-++#endif
-++
-+ #if !defined(__NR_openat2)
-+ #define __NR_openat2 (__NR_SYSCALL_BASE+437)
-+ #endif
-+@@ -1590,6 +1594,90 @@
-+ #define __NR_faccessat2 (__NR_SYSCALL_BASE+439)
-+ #endif
-+
-++#if !defined(__NR_process_madvise)
-++#define __NR_process_madvise (__NR_SYSCALL_BASE+440)
-++#endif
-++
-++#if !defined(__NR_epoll_pwait2)
-++#define __NR_epoll_pwait2 (__NR_SYSCALL_BASE+441)
-++#endif
-++
-++#if !defined(__NR_mount_setattr)
-++#define __NR_mount_setattr (__NR_SYSCALL_BASE+442)
-++#endif
-++
-++#if !defined(__NR_quotactl_fd)
-++#define __NR_quotactl_fd (__NR_SYSCALL_BASE+443)
-++#endif
-++
-++#if !defined(__NR_landlock_create_ruleset)
-++#define __NR_landlock_create_ruleset (__NR_SYSCALL_BASE+444)
-++#endif
-++
-++#if !defined(__NR_landlock_add_rule)
-++#define __NR_landlock_add_rule (__NR_SYSCALL_BASE+445)
-++#endif
-++
-++#if !defined(__NR_landlock_restrict_self)
-++#define __NR_landlock_restrict_self (__NR_SYSCALL_BASE+446)
-++#endif
-++
-++#if !defined(__NR_process_mrelease)
-++#define __NR_process_mrelease (__NR_SYSCALL_BASE+448)
-++#endif
-++
-++#if !defined(__NR_futex_waitv)
-++#define __NR_futex_waitv (__NR_SYSCALL_BASE+449)
-++#endif
-++
-++#if !defined(__NR_set_mempolicy_home_node)
-++#define __NR_set_mempolicy_home_node (__NR_SYSCALL_BASE+450)
-++#endif
-++
-++#if !defined(__NR_cachestat)
-++#define __NR_cachestat (__NR_SYSCALL_BASE+451)
-++#endif
-++
-++#if !defined(__NR_fchmodat2)
-++#define __NR_fchmodat2 (__NR_SYSCALL_BASE+452)
-++#endif
-++
-++#if !defined(__NR_map_shadow_stack)
-++#define __NR_map_shadow_stack (__NR_SYSCALL_BASE+453)
-++#endif
-++
-++#if !defined(__NR_futex_wake)
-++#define __NR_futex_wake (__NR_SYSCALL_BASE+454)
-++#endif
-++
-++#if !defined(__NR_futex_wait)
-++#define __NR_futex_wait (__NR_SYSCALL_BASE+455)
-++#endif
-++
-++#if !defined(__NR_futex_requeue)
-++#define __NR_futex_requeue (__NR_SYSCALL_BASE+456)
-++#endif
-++
-++#if !defined(__NR_statmount)
-++#define __NR_statmount (__NR_SYSCALL_BASE+457)
-++#endif
-++
-++#if !defined(__NR_listmount)
-++#define __NR_listmount (__NR_SYSCALL_BASE+458)
-++#endif
-++
-++#if !defined(__NR_lsm_get_self_attr)
-++#define __NR_lsm_get_self_attr (__NR_SYSCALL_BASE+459)
-++#endif
-++
-++#if !defined(__NR_lsm_set_self_attr)
-++#define __NR_lsm_set_self_attr (__NR_SYSCALL_BASE+460)
-++#endif
-++
-++#if !defined(__NR_lsm_list_modules)
-++#define __NR_lsm_list_modules (__NR_SYSCALL_BASE+461)
-++#endif
-++
-+ // ARM private syscalls.
-+ #if !defined(__ARM_NR_BASE)
-+ #define __ARM_NR_BASE (__NR_SYSCALL_BASE + 0xF0000)
-+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
-+index dc846ee7ad1ab..edcfd05004139 100644
-+---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
-++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
-+@@ -3,7 +3,7 @@
-+ // found in the LICENSE file.
-+
-+ /* Constructed by running:
-+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v5.8
-++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v6.8
-+ * | grep -vE '^#|^$'
-+ * | awk '{ if ($2 == "i386") { print "#if !defined(__NR_" $3
")\n#define __NR_" $3 " " $1 "\n#endif\n"; } }'
-+ * */
-+@@ -1715,6 +1715,10 @@
-+ #define __NR_clone3 435
-+ #endif
-+
-++#if !defined(__NR_close_range)
-++#define __NR_close_range 436
-++#endif
-++
-+ #if !defined(__NR_openat2)
-+ #define __NR_openat2 437
-+ #endif
-+@@ -1727,5 +1731,93 @@
-+ #define __NR_faccessat2 439
-+ #endif
-+
-++#if !defined(__NR_process_madvise)
-++#define __NR_process_madvise 440
-++#endif
-++
-++#if !defined(__NR_epoll_pwait2)
-++#define __NR_epoll_pwait2 441
-++#endif
-++
-++#if !defined(__NR_mount_setattr)
-++#define __NR_mount_setattr 442
-++#endif
-++
-++#if !defined(__NR_quotactl_fd)
-++#define __NR_quotactl_fd 443
-++#endif
-++
-++#if !defined(__NR_landlock_create_ruleset)
-++#define __NR_landlock_create_ruleset 444
-++#endif
-++
-++#if !defined(__NR_landlock_add_rule)
-++#define __NR_landlock_add_rule 445
-++#endif
-++
-++#if !defined(__NR_landlock_restrict_self)
-++#define __NR_landlock_restrict_self 446
-++#endif
-++
-++#if !defined(__NR_memfd_secret)
-++#define __NR_memfd_secret 447
-++#endif
-++
-++#if !defined(__NR_process_mrelease)
-++#define __NR_process_mrelease 448
-++#endif
-++
-++#if !defined(__NR_futex_waitv)
-++#define __NR_futex_waitv 449
-++#endif
-++
-++#if !defined(__NR_set_mempolicy_home_node)
-++#define __NR_set_mempolicy_home_node 450
-++#endif
-++
-++#if !defined(__NR_cachestat)
-++#define __NR_cachestat 451
-++#endif
-++
-++#if !defined(__NR_fchmodat2)
-++#define __NR_fchmodat2 452
-++#endif
-++
-++#if !defined(__NR_map_shadow_stack)
-++#define __NR_map_shadow_stack 453
-++#endif
-++
-++#if !defined(__NR_futex_wake)
-++#define __NR_futex_wake 454
-++#endif
-++
-++#if !defined(__NR_futex_wait)
-++#define __NR_futex_wait 455
-++#endif
-++
-++#if !defined(__NR_futex_requeue)
-++#define __NR_futex_requeue 456
-++#endif
-++
-++#if !defined(__NR_statmount)
-++#define __NR_statmount 457
-++#endif
-++
-++#if !defined(__NR_listmount)
-++#define __NR_listmount 458
-++#endif
-++
-++#if !defined(__NR_lsm_get_self_attr)
-++#define __NR_lsm_get_self_attr 459
-++#endif
-++
-++#if !defined(__NR_lsm_set_self_attr)
-++#define __NR_lsm_set_self_attr 460
-++#endif
-++
-++#if !defined(__NR_lsm_list_modules)
-++#define __NR_lsm_list_modules 461
-++#endif
-++
-+
-+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
-+diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
-+index ab51703464aa0..6767d88702f3d 100644
-+---
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
-++++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
-+@@ -3,7 +3,7 @@
-+ // found in the LICENSE file.
-+
-+ /* Constructed by running:
-+- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v5.8
-++ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v6.8
-+ * | grep -vE '^#|^$'
-+ * | awk '{ if ($2 != "x32") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
-+ * */
-+@@ -1403,6 +1403,10 @@
-+ #define __NR_clone3 435
-+ #endif
-+
-++#if !defined(__NR_close_range)
-++#define __NR_close_range 436
-++#endif
-++
-+ #if !defined(__NR_openat2)
-+ #define __NR_openat2 437
-+ #endif
-+@@ -1415,4 +1419,92 @@
-+ #define __NR_faccessat2 439
-+ #endif
-+
-++#if !defined(__NR_process_madvise)
-++#define __NR_process_madvise 440
-++#endif
-++
-++#if !defined(__NR_epoll_pwait2)
-++#define __NR_epoll_pwait2 441
-++#endif
-++
-++#if !defined(__NR_mount_setattr)
-++#define __NR_mount_setattr 442
-++#endif
-++
-++#if !defined(__NR_quotactl_fd)
-++#define __NR_quotactl_fd 443
-++#endif
-++
-++#if !defined(__NR_landlock_create_ruleset)
-++#define __NR_landlock_create_ruleset 444
-++#endif
-++
-++#if !defined(__NR_landlock_add_rule)
-++#define __NR_landlock_add_rule 445
-++#endif
-++
-++#if !defined(__NR_landlock_restrict_self)
-++#define __NR_landlock_restrict_self 446
-++#endif
-++
-++#if !defined(__NR_memfd_secret)
-++#define __NR_memfd_secret 447
-++#endif
-++
-++#if !defined(__NR_process_mrelease)
-++#define __NR_process_mrelease 448
-++#endif
-++
-++#if !defined(__NR_futex_waitv)
-++#define __NR_futex_waitv 449
-++#endif
-++
-++#if !defined(__NR_set_mempolicy_home_node)
-++#define __NR_set_mempolicy_home_node 450
-++#endif
-++
-++#if !defined(__NR_cachestat)
-++#define __NR_cachestat 451
-++#endif
-++
-++#if !defined(__NR_fchmodat2)
-++#define __NR_fchmodat2 452
-++#endif
-++
-++#if !defined(__NR_map_shadow_stack)
-++#define __NR_map_shadow_stack 453
-++#endif
-++
-++#if !defined(__NR_futex_wake)
-++#define __NR_futex_wake 454
-++#endif
-++
-++#if !defined(__NR_futex_wait)
-++#define __NR_futex_wait 455
-++#endif
-++
-++#if !defined(__NR_futex_requeue)
-++#define __NR_futex_requeue 456
-++#endif
-++
-++#if !defined(__NR_statmount)
-++#define __NR_statmount 457
-++#endif
-++
-++#if !defined(__NR_listmount)
-++#define __NR_listmount 458
-++#endif
-++
-++#if !defined(__NR_lsm_get_self_attr)
-++#define __NR_lsm_get_self_attr 459
-++#endif
-++
-++#if !defined(__NR_lsm_set_self_attr)
-++#define __NR_lsm_set_self_attr 460
-++#endif
-++
-++#if !defined(__NR_lsm_list_modules)
-++#define __NR_lsm_list_modules 461
-++#endif
-++
-+ #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
-diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
----
a/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
-+++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm64_linux_syscalls.h
-@@ -1,14 +1,14 @@
- // Copyright 2014 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
-
- /* Constructed by running:
-- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v5.8
-+ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/include/uapi/asm-generic/unistd.h?h=v6.8
- * | gcc -D__BITS_PER_LONG=64 -D__ARCH_WANT_STAT64
-D__ARCH_WANT_SET_GET_RLIMIT -D__ARCH_WANT_SYS_CLONE3 -D__ARCH_WANT_RENAMEAT
-E -dD -
- * | grep __NR | grep -vE '__NR_arch_specific_syscall|__NR_syscalls' |
sort -n -k 3 | sed -e 's/__NR3264/__NR/g'
- * | awk '{ if ($2 != $3) { print "#if !defined(" $2 ")\n#define " $2 " "
$3 "\n#endif\n"; } }
- * */
-
- #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
- #define SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
-
-@@ -1177,21 +1177,109 @@
- #if !defined(__NR_pidfd_open)
- #define __NR_pidfd_open 434
- #endif
-
- #if !defined(__NR_clone3)
- #define __NR_clone3 435
- #endif
-
-+#if !defined(__NR_close_range)
-+#define __NR_close_range 436
-+#endif
-+
- #if !defined(__NR_openat2)
- #define __NR_openat2 437
- #endif
-
- #if !defined(__NR_pidfd_getfd)
- #define __NR_pidfd_getfd 438
- #endif
-
- #if !defined(__NR_faccessat2)
- #define __NR_faccessat2 439
- #endif
-
-+#if !defined(__NR_process_madvise)
-+#define __NR_process_madvise 440
-+#endif
-+
-+#if !defined(__NR_epoll_pwait2)
-+#define __NR_epoll_pwait2 441
-+#endif
-+
-+#if !defined(__NR_mount_setattr)
-+#define __NR_mount_setattr 442
-+#endif
-+
-+#if !defined(__NR_quotactl_fd)
-+#define __NR_quotactl_fd 443
-+#endif
-+
-+#if !defined(__NR_landlock_create_ruleset)
-+#define __NR_landlock_create_ruleset 444
-+#endif
-+
-+#if !defined(__NR_landlock_add_rule)
-+#define __NR_landlock_add_rule 445
-+#endif
-+
-+#if !defined(__NR_landlock_restrict_self)
-+#define __NR_landlock_restrict_self 446
-+#endif
-+
-+#if !defined(__NR_process_mrelease)
-+#define __NR_process_mrelease 448
-+#endif
-+
-+#if !defined(__NR_futex_waitv)
-+#define __NR_futex_waitv 449
-+#endif
-+
-+#if !defined(__NR_set_mempolicy_home_node)
-+#define __NR_set_mempolicy_home_node 450
-+#endif
-+
-+#if !defined(__NR_cachestat)
-+#define __NR_cachestat 451
-+#endif
-+
-+#if !defined(__NR_fchmodat2)
-+#define __NR_fchmodat2 452
-+#endif
-+
-+#if !defined(__NR_map_shadow_stack)
-+#define __NR_map_shadow_stack 453
-+#endif
-+
-+#if !defined(__NR_futex_wake)
-+#define __NR_futex_wake 454
-+#endif
-+
-+#if !defined(__NR_futex_wait)
-+#define __NR_futex_wait 455
-+#endif
-+
-+#if !defined(__NR_futex_requeue)
-+#define __NR_futex_requeue 456
-+#endif
-+
-+#if !defined(__NR_statmount)
-+#define __NR_statmount 457
-+#endif
-+
-+#if !defined(__NR_listmount)
-+#define __NR_listmount 458
-+#endif
-+
-+#if !defined(__NR_lsm_get_self_attr)
-+#define __NR_lsm_get_self_attr 459
-+#endif
-+
-+#if !defined(__NR_lsm_set_self_attr)
-+#define __NR_lsm_set_self_attr 460
-+#endif
-+
-+#if !defined(__NR_lsm_list_modules)
-+#define __NR_lsm_list_modules 461
-+#endif
-+
- #endif // SANDBOX_LINUX_SYSTEM_HEADERS_ARM64_LINUX_SYSCALLS_H_
-diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
----
a/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
-+++
b/security/sandbox/chromium/sandbox/linux/system_headers/arm_linux_syscalls.h
-@@ -1,14 +1,14 @@
- // Copyright (c) 2012 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
-
- /* Constructed by running:
-- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v5.8
-+ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/arm/tools/syscall.tbl?h=v6.8
- * | grep -vE '^#|^$'
- * | awk '{ if ($2 != "oabi") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " (__NR_SYSCALL_BASE+" $1 ")\n#endif\n"; } }'
- * */
-
- #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_ARM_LINUX_SYSCALLS_H_
- #define SANDBOX_LINUX_SYSTEM_HEADERS_ARM_LINUX_SYSCALLS_H_
-
- #if !defined(__arm__) || !defined(__ARM_EABI__)
-@@ -1573,28 +1573,116 @@
- #if !defined(__NR_pidfd_open)
- #define __NR_pidfd_open (__NR_SYSCALL_BASE+434)
- #endif
-
- #if !defined(__NR_clone3)
- #define __NR_clone3 (__NR_SYSCALL_BASE+435)
- #endif
-
-+#if !defined(__NR_close_range)
-+#define __NR_close_range (__NR_SYSCALL_BASE+436)
-+#endif
-+
- #if !defined(__NR_openat2)
- #define __NR_openat2 (__NR_SYSCALL_BASE+437)
- #endif
-
- #if !defined(__NR_pidfd_getfd)
- #define __NR_pidfd_getfd (__NR_SYSCALL_BASE+438)
- #endif
-
- #if !defined(__NR_faccessat2)
- #define __NR_faccessat2 (__NR_SYSCALL_BASE+439)
- #endif
-
-+#if !defined(__NR_process_madvise)
-+#define __NR_process_madvise (__NR_SYSCALL_BASE+440)
-+#endif
-+
-+#if !defined(__NR_epoll_pwait2)
-+#define __NR_epoll_pwait2 (__NR_SYSCALL_BASE+441)
-+#endif
-+
-+#if !defined(__NR_mount_setattr)
-+#define __NR_mount_setattr (__NR_SYSCALL_BASE+442)
-+#endif
-+
-+#if !defined(__NR_quotactl_fd)
-+#define __NR_quotactl_fd (__NR_SYSCALL_BASE+443)
-+#endif
-+
-+#if !defined(__NR_landlock_create_ruleset)
-+#define __NR_landlock_create_ruleset (__NR_SYSCALL_BASE+444)
-+#endif
-+
-+#if !defined(__NR_landlock_add_rule)
-+#define __NR_landlock_add_rule (__NR_SYSCALL_BASE+445)
-+#endif
-+
-+#if !defined(__NR_landlock_restrict_self)
-+#define __NR_landlock_restrict_self (__NR_SYSCALL_BASE+446)
-+#endif
-+
-+#if !defined(__NR_process_mrelease)
-+#define __NR_process_mrelease (__NR_SYSCALL_BASE+448)
-+#endif
-+
-+#if !defined(__NR_futex_waitv)
-+#define __NR_futex_waitv (__NR_SYSCALL_BASE+449)
-+#endif
-+
-+#if !defined(__NR_set_mempolicy_home_node)
-+#define __NR_set_mempolicy_home_node (__NR_SYSCALL_BASE+450)
-+#endif
-+
-+#if !defined(__NR_cachestat)
-+#define __NR_cachestat (__NR_SYSCALL_BASE+451)
-+#endif
-+
-+#if !defined(__NR_fchmodat2)
-+#define __NR_fchmodat2 (__NR_SYSCALL_BASE+452)
-+#endif
-+
-+#if !defined(__NR_map_shadow_stack)
-+#define __NR_map_shadow_stack (__NR_SYSCALL_BASE+453)
-+#endif
-+
-+#if !defined(__NR_futex_wake)
-+#define __NR_futex_wake (__NR_SYSCALL_BASE+454)
-+#endif
-+
-+#if !defined(__NR_futex_wait)
-+#define __NR_futex_wait (__NR_SYSCALL_BASE+455)
-+#endif
-+
-+#if !defined(__NR_futex_requeue)
-+#define __NR_futex_requeue (__NR_SYSCALL_BASE+456)
-+#endif
-+
-+#if !defined(__NR_statmount)
-+#define __NR_statmount (__NR_SYSCALL_BASE+457)
-+#endif
-+
-+#if !defined(__NR_listmount)
-+#define __NR_listmount (__NR_SYSCALL_BASE+458)
-+#endif
-+
-+#if !defined(__NR_lsm_get_self_attr)
-+#define __NR_lsm_get_self_attr (__NR_SYSCALL_BASE+459)
-+#endif
-+
-+#if !defined(__NR_lsm_set_self_attr)
-+#define __NR_lsm_set_self_attr (__NR_SYSCALL_BASE+460)
-+#endif
-+
-+#if !defined(__NR_lsm_list_modules)
-+#define __NR_lsm_list_modules (__NR_SYSCALL_BASE+461)
-+#endif
-+
- // ARM private syscalls.
- #if !defined(__ARM_NR_BASE)
- #define __ARM_NR_BASE (__NR_SYSCALL_BASE + 0xF0000)
- #endif
-
- #if !defined(__ARM_NR_breakpoint)
- #define __ARM_NR_breakpoint (__ARM_NR_BASE+1)
- #endif
-diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
----
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
-+++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_32_linux_syscalls.h
-@@ -1,14 +1,14 @@
- // Copyright (c) 2012 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
-
- /* Constructed by running:
-- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v5.8
-+ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_32.tbl?h=v6.8
- * | grep -vE '^#|^$'
- * | awk '{ if ($2 == "i386") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
- * */
-
- #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
- #define SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
-
- #if !defined(__i386__)
-@@ -1710,22 +1710,114 @@
- #if !defined(__NR_pidfd_open)
- #define __NR_pidfd_open 434
- #endif
-
- #if !defined(__NR_clone3)
- #define __NR_clone3 435
- #endif
-
-+#if !defined(__NR_close_range)
-+#define __NR_close_range 436
-+#endif
-+
- #if !defined(__NR_openat2)
- #define __NR_openat2 437
- #endif
-
- #if !defined(__NR_pidfd_getfd)
- #define __NR_pidfd_getfd 438
- #endif
-
- #if !defined(__NR_faccessat2)
- #define __NR_faccessat2 439
- #endif
-
-+#if !defined(__NR_process_madvise)
-+#define __NR_process_madvise 440
-+#endif
-+
-+#if !defined(__NR_epoll_pwait2)
-+#define __NR_epoll_pwait2 441
-+#endif
-+
-+#if !defined(__NR_mount_setattr)
-+#define __NR_mount_setattr 442
-+#endif
-+
-+#if !defined(__NR_quotactl_fd)
-+#define __NR_quotactl_fd 443
-+#endif
-+
-+#if !defined(__NR_landlock_create_ruleset)
-+#define __NR_landlock_create_ruleset 444
-+#endif
-+
-+#if !defined(__NR_landlock_add_rule)
-+#define __NR_landlock_add_rule 445
-+#endif
-+
-+#if !defined(__NR_landlock_restrict_self)
-+#define __NR_landlock_restrict_self 446
-+#endif
-+
-+#if !defined(__NR_memfd_secret)
-+#define __NR_memfd_secret 447
-+#endif
-+
-+#if !defined(__NR_process_mrelease)
-+#define __NR_process_mrelease 448
-+#endif
-+
-+#if !defined(__NR_futex_waitv)
-+#define __NR_futex_waitv 449
-+#endif
-+
-+#if !defined(__NR_set_mempolicy_home_node)
-+#define __NR_set_mempolicy_home_node 450
-+#endif
-+
-+#if !defined(__NR_cachestat)
-+#define __NR_cachestat 451
-+#endif
-+
-+#if !defined(__NR_fchmodat2)
-+#define __NR_fchmodat2 452
-+#endif
-+
-+#if !defined(__NR_map_shadow_stack)
-+#define __NR_map_shadow_stack 453
-+#endif
-+
-+#if !defined(__NR_futex_wake)
-+#define __NR_futex_wake 454
-+#endif
-+
-+#if !defined(__NR_futex_wait)
-+#define __NR_futex_wait 455
-+#endif
-+
-+#if !defined(__NR_futex_requeue)
-+#define __NR_futex_requeue 456
-+#endif
-+
-+#if !defined(__NR_statmount)
-+#define __NR_statmount 457
-+#endif
-+
-+#if !defined(__NR_listmount)
-+#define __NR_listmount 458
-+#endif
-+
-+#if !defined(__NR_lsm_get_self_attr)
-+#define __NR_lsm_get_self_attr 459
-+#endif
-+
-+#if !defined(__NR_lsm_set_self_attr)
-+#define __NR_lsm_set_self_attr 460
-+#endif
-+
-+#if !defined(__NR_lsm_list_modules)
-+#define __NR_lsm_list_modules 461
-+#endif
-+
-
- #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_32_LINUX_SYSCALLS_H_
-diff --git
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h

b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
----
a/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
-+++
b/security/sandbox/chromium/sandbox/linux/system_headers/x86_64_linux_syscalls.h
-@@ -1,14 +1,14 @@
- // Copyright (c) 2012 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
-
- /* Constructed by running:
-- * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v5.8
-+ * curl -vsSL
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/plain/arch/x86/entry/syscalls/syscall_64.tbl?h=v6.8
- * | grep -vE '^#|^$'
- * | awk '{ if ($2 != "x32") { print "#if !defined(__NR_" $3 ")\n#define
__NR_" $3 " " $1 "\n#endif\n"; } }'
- * */
-
- #ifndef SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
- #define SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
-
- #if !defined(__x86_64__)
-@@ -1398,21 +1398,113 @@
- #if !defined(__NR_pidfd_open)
- #define __NR_pidfd_open 434
- #endif
-
- #if !defined(__NR_clone3)
- #define __NR_clone3 435
- #endif
-
-+#if !defined(__NR_close_range)
-+#define __NR_close_range 436
-+#endif
-+
- #if !defined(__NR_openat2)
- #define __NR_openat2 437
- #endif
-
- #if !defined(__NR_pidfd_getfd)
- #define __NR_pidfd_getfd 438
- #endif
-
- #if !defined(__NR_faccessat2)
- #define __NR_faccessat2 439
- #endif
-
-+#if !defined(__NR_process_madvise)
-+#define __NR_process_madvise 440
-+#endif
-+
-+#if !defined(__NR_epoll_pwait2)
-+#define __NR_epoll_pwait2 441
-+#endif
-+
-+#if !defined(__NR_mount_setattr)
-+#define __NR_mount_setattr 442
-+#endif
-+
-+#if !defined(__NR_quotactl_fd)
-+#define __NR_quotactl_fd 443
-+#endif
-+
-+#if !defined(__NR_landlock_create_ruleset)
-+#define __NR_landlock_create_ruleset 444
-+#endif
-+
-+#if !defined(__NR_landlock_add_rule)
-+#define __NR_landlock_add_rule 445
-+#endif
-+
-+#if !defined(__NR_landlock_restrict_self)
-+#define __NR_landlock_restrict_self 446
-+#endif
-+
-+#if !defined(__NR_memfd_secret)
-+#define __NR_memfd_secret 447
-+#endif
-+
-+#if !defined(__NR_process_mrelease)
-+#define __NR_process_mrelease 448
-+#endif
-+
-+#if !defined(__NR_futex_waitv)
-+#define __NR_futex_waitv 449
-+#endif
-+
-+#if !defined(__NR_set_mempolicy_home_node)
-+#define __NR_set_mempolicy_home_node 450
-+#endif
-+
-+#if !defined(__NR_cachestat)
-+#define __NR_cachestat 451
-+#endif
-+
-+#if !defined(__NR_fchmodat2)
-+#define __NR_fchmodat2 452
-+#endif
-+
-+#if !defined(__NR_map_shadow_stack)
-+#define __NR_map_shadow_stack 453
-+#endif
-+
-+#if !defined(__NR_futex_wake)
-+#define __NR_futex_wake 454
-+#endif
-+
-+#if !defined(__NR_futex_wait)
-+#define __NR_futex_wait 455
-+#endif
-+
-+#if !defined(__NR_futex_requeue)
-+#define __NR_futex_requeue 456
-+#endif
-+
-+#if !defined(__NR_statmount)
-+#define __NR_statmount 457
-+#endif
-+
-+#if !defined(__NR_listmount)
-+#define __NR_listmount 458
-+#endif
-+
-+#if !defined(__NR_lsm_get_self_attr)
-+#define __NR_lsm_get_self_attr 459
-+#endif
-+
-+#if !defined(__NR_lsm_set_self_attr)
-+#define __NR_lsm_set_self_attr 460
-+#endif
-+
-+#if !defined(__NR_lsm_list_modules)
-+#define __NR_lsm_list_modules 461
-+#endif
-+
- #endif // SANDBOX_LINUX_SYSTEM_HEADERS_X86_64_LINUX_SYSCALLS_H_
-
-# HG changeset patch
-# User Jed Davis <jld AT mozilla.com>
-# Date 1714476334 0
-# Node ID 72b15a00b128e74ff180ddc564c987b6482a0831
-# Parent ad8cfda2ed0ca7a54417879e94325796714cade7
-Bug 1889045 - Update sandbox policies for `epoll_pwait2`. r=gcp
-
-Note that this can't easily be unit-tested, because the tests can't
-distinguish between the real `ENOSYS` from lack of kernel support and
-the fake `ENOSYS` from the sandbox.
-
-Differential Revision: https://phabricator.services.mozilla.com/D208823
-
-diff --git a/security/sandbox/linux/SandboxFilterUtil.h
b/security/sandbox/linux/SandboxFilterUtil.h
---- a/security/sandbox/linux/SandboxFilterUtil.h
-+++ b/security/sandbox/linux/SandboxFilterUtil.h
-@@ -213,19 +213,22 @@ class SandboxPolicyBase : public sandbox
- case __NR_epoll_create1
- #else
- # define CASES_FOR_epoll_create case __NR_epoll_create1
- #endif
-
- #ifdef __NR_epoll_wait
- # define CASES_FOR_epoll_wait \
- case __NR_epoll_wait: \
-- case __NR_epoll_pwait
-+ case __NR_epoll_pwait: \
-+ case __NR_epoll_pwait2
- #else
--# define CASES_FOR_epoll_wait case __NR_epoll_pwait
-+# define CASES_FOR_epoll_wait \
-+ case __NR_epoll_pwait: \
-+ case __NR_epoll_pwait2
- #endif
-
- #ifdef __NR_pipe
- # define CASES_FOR_pipe \
- case __NR_pipe: \
- case __NR_pipe2
- #else
- # define CASES_FOR_pipe case __NR_pipe2
-
-
diff --git a/net/iproute2/DETAILS b/net/iproute2/DETAILS
index c3d4ecb..376596c 100755
--- a/net/iproute2/DETAILS
+++ b/net/iproute2/DETAILS
@@ -1,5 +1,5 @@
SPELL=iproute2
- VERSION=6.8.0
+ VERSION=6.9.0
SOURCE=$SPELL-$VERSION.tar.xz
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
SOURCE_URL[0]=${KERNEL_URL}/pub/linux/utils/net/iproute2/$SOURCE
diff --git a/net/iproute2/HISTORY b/net/iproute2/HISTORY
index f222645..ba4a175 100644
--- a/net/iproute2/HISTORY
+++ b/net/iproute2/HISTORY
@@ -1,3 +1,6 @@
+2024-05-13 Pavel Vinogradov <public AT sourcemage.org>
+ * DETAILS: version 6.9.0
+
2024-03-11 Pavel Vinogradov <public AT sourcemage.org>
* DETAILS: version 6.8.0



  • [[SM-Commit] ] GIT changes to master grimoire by Pavel Vinogradov (8c9504027209365e5a8e3c9a175b332deab173a7), Pavel Vinogradov, 05/14/2024

Archive powered by MHonArc 2.6.24.

Top of Page