New commits:
commit 0e5c6b7279687eff6f22577fa6c9a4ce6c96d74f
Author: Pavel Vinogradov <public AT sourcemaage.org>
Commit: Pavel Vinogradov <public AT sourcemaage.org>
http/firefox: version 91.0, SECURITY_PATCH++
commit 7396e3566d154f3b97de0515f2755ee26acd018c
Author: Pavel Vinogradov <public AT sourcemaage.org>
Commit: Pavel Vinogradov <public AT sourcemaage.org>
SOURCE_URL[0]="http://releases.mozilla.org/pub/${SPELL}/releases/${VERSION}/source/${SOURCE}"
SOURCE2="${SOURCE}.asc"
diff --git a/http/firefox/HISTORY b/http/firefox/HISTORY
index 596fad5..f7ffdbc 100644
--- a/http/firefox/HISTORY
+++ b/http/firefox/HISTORY
@@ -1,3 +1,8 @@
+2021-08-11 Pavel Vinogradov <public AT sourcemage.org>
+ * DETAILS: version 91.0, SECURITY_PATCH++
+ * DEPENDS: nss >= 3.68
+ * patches/*: updated
+
2021-07-22 Pavel Vinogradov <public AT sourcemage.org>
* DETAILS: version 90.0.2
diff --git a/http/firefox/patches/0001-Don-t-use-build-id.patch
b/http/firefox/patches/0001-Don-t-use-build-id.patch
index 46baad2..d0e9594 100644
--- a/http/firefox/patches/0001-Don-t-use-build-id.patch
+++ b/http/firefox/patches/0001-Don-t-use-build-id.patch
@@ -1,7 +1,7 @@
-From c2fd3a63431981685b68590db8f073dc637da113 Mon Sep 17 00:00:00 2001
+From 10709c00bf1c2408db74f886c53a2f6338055d57 Mon Sep 17 00:00:00 2001
From: "Jory A. Pratt" <anarchy AT gentoo.org>
Date: Mon, 6 Apr 2020 19:14:26 +0200
-Subject: [PATCH 01/36] Don't use build id
+Subject: [PATCH 01/35] Don't use build id
We must drop build id as it causes conflicts when merging
thunderbird/firefox/seamonkey on same system when using
@@ -14,7 +14,7 @@ Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
2 files changed, 14 deletions(-)
Bug: https://bugs.gentoo.org/785613
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
diff --git
a/http/firefox/patches/0008-bmo-878089-Don-t-fail-when-TERM-is-not-set.patch
b/http/firefox/patches/0008-bmo-878089-Don-t-fail-when-TERM-is-not-set.patch
index e558f97..4a026c9 100644
---
a/http/firefox/patches/0008-bmo-878089-Don-t-fail-when-TERM-is-not-set.patch
+++
b/http/firefox/patches/0008-bmo-878089-Don-t-fail-when-TERM-is-not-set.patch
@@ -1,7 +1,7 @@
-From 5ace2ca2b244f40c2b762bef1307222b738c47b8 Mon Sep 17 00:00:00 2001
+From 1c1be99b493410fb22c060cf9e403c284f9619ab Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Mon, 6 Apr 2020 19:41:43 +0200
-Subject: [PATCH 08/36] bmo#878089: Don't fail when TERM is not set
+Subject: [PATCH 08/35] bmo#878089: Don't fail when TERM is not set
b/http/firefox/patches/0013-musl-Add-alternate-name-for-private-siginfo-struct-m.patch
index 19827df..8f19ead 100644
---
a/http/firefox/patches/0013-musl-Add-alternate-name-for-private-siginfo-struct-m.patch
+++
b/http/firefox/patches/0013-musl-Add-alternate-name-for-private-siginfo-struct-m.patch
@@ -1,7 +1,7 @@
-From 489c3bf843ca8a742e68a7e132ccf4fa92cb846f Mon Sep 17 00:00:00 2001
+From 65db1aa0b466bf25d63097204281bc2eed541105 Mon Sep 17 00:00:00 2001
From: Samuel Holland <samuel AT sholland.org>
Date: Sun, 8 Jan 2017 19:16:38 -0600
-Subject: [PATCH 13/36] musl: Add alternate name for private siginfo struct
+Subject: [PATCH 13/35] musl: Add alternate name for private siginfo struct
member
musl does not provide a macro for detecting its presence. For now,
diff --git a/http/firefox/patches/0014-musl-Fix-syscall-wrappers.patch
b/http/firefox/patches/0014-musl-Fix-syscall-wrappers.patch
index 6465ba7..4c2911e 100644
--- a/http/firefox/patches/0014-musl-Fix-syscall-wrappers.patch
+++ b/http/firefox/patches/0014-musl-Fix-syscall-wrappers.patch
@@ -1,7 +1,7 @@
-From b2d69aa429c0eaec04dbf4c3b98fe3fa0a0e312f Mon Sep 17 00:00:00 2001
+From 974f1ae9198ba1c2c4cfb33a17b7d011680aa99d Mon Sep 17 00:00:00 2001
From: Samuel Holland <samuel AT sholland.org>
Date: Sun, 8 Jan 2017 19:19:23 -0600
-Subject: [PATCH 14/36] musl: Fix syscall wrappers
+Subject: [PATCH 14/35] musl: Fix syscall wrappers
musl defines p{read,write}64 to their non-suffixed equivalents to avoid
duplication in its syscall wrappers. This breaks macro expansion here,
diff --git
a/http/firefox/patches/0015-musl-Only-use-system-heap-reporter-with-glibc.patch
b/http/firefox/patches/0015-musl-Only-use-system-heap-reporter-with-glibc.patch
index 42cb0a1..446ff99 100644
---
a/http/firefox/patches/0015-musl-Only-use-system-heap-reporter-with-glibc.patch
+++
b/http/firefox/patches/0015-musl-Only-use-system-heap-reporter-with-glibc.patch
@@ -1,7 +1,7 @@
-From f1ec001b63419f258983421bb636dfc7afcbf295 Mon Sep 17 00:00:00 2001
+From 7079236d353b83ffc32de2c9faa30a4fd2a8dd62 Mon Sep 17 00:00:00 2001
From: "Jory A. Pratt" <anarchy AT gentoo.org>
Date: Mon, 6 Apr 2020 20:09:26 +0200
-Subject: [PATCH 15/36] musl: Only use system heap reporter with glibc
+Subject: [PATCH 15/35] musl: Only use system heap reporter with glibc
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0016-musl-Set-pthread-name-for-non-glibc-systems.patch
b/http/firefox/patches/0016-musl-Set-pthread-name-for-non-glibc-systems.patch
index e0aab45..b705633 100644
---
a/http/firefox/patches/0016-musl-Set-pthread-name-for-non-glibc-systems.patch
+++
b/http/firefox/patches/0016-musl-Set-pthread-name-for-non-glibc-systems.patch
@@ -1,7 +1,7 @@
-From e5969388dc0d1222db02877f4ee209e22b89fac2 Mon Sep 17 00:00:00 2001
+From 5ea46892b64e9da2a6a7f03d2c0b02ff158bb0cd Mon Sep 17 00:00:00 2001
From: "Jory A. Pratt" <anarchy AT gentoo.org>
Date: Mon, 6 Apr 2020 20:10:03 +0200
-Subject: [PATCH 16/36] musl: Set pthread name for non glibc systems
+Subject: [PATCH 16/35] musl: Set pthread name for non glibc systems
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0017-musl-getcontext-is-only-avaliable-on-glibc-systems.patch
b/http/firefox/patches/0017-musl-getcontext-is-only-avaliable-on-glibc-systems.patch
index 884d430..e081335 100644
---
a/http/firefox/patches/0017-musl-getcontext-is-only-avaliable-on-glibc-systems.patch
+++
b/http/firefox/patches/0017-musl-getcontext-is-only-avaliable-on-glibc-systems.patch
@@ -1,7 +1,7 @@
-From 8a35b6a8819331af0bb09dde602aa9be7df792cb Mon Sep 17 00:00:00 2001
+From 486b2c5cf0df0b905a64897c86e42f5e2e4d99bd Mon Sep 17 00:00:00 2001
From: "Jory A. Pratt" <anarchy AT gentoo.org>
Date: Mon, 6 Apr 2020 20:10:47 +0200
-Subject: [PATCH 17/36] musl: getcontext is only avaliable on glibc systems
+Subject: [PATCH 17/35] musl: getcontext is only avaliable on glibc systems
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
@@ -9,10 +9,10 @@ Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
1 file changed, 2 insertions(+)
b/http/firefox/patches/0018-musl-sys-auvx.h-avaliable-on-more-then-just-glibc-sy.patch
index 0e86dd6..571adac 100644
---
a/http/firefox/patches/0018-musl-sys-auvx.h-avaliable-on-more-then-just-glibc-sy.patch
+++
b/http/firefox/patches/0018-musl-sys-auvx.h-avaliable-on-more-then-just-glibc-sy.patch
@@ -1,7 +1,7 @@
-From 854fd8eeb7b5b93fa14ec504ddcf378f79ef0a6b Mon Sep 17 00:00:00 2001
+From ea16f90f0bc7809ee3c0213e7e4a4e52c199ea4d Mon Sep 17 00:00:00 2001
From: "Jory A. Pratt" <anarchy AT gentoo.org>
Date: Mon, 6 Apr 2020 20:12:09 +0200
-Subject: [PATCH 18/36] musl: sys/auvx.h avaliable on more then just glibc
+Subject: [PATCH 18/35] musl: sys/auvx.h avaliable on more then just glibc
systems
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
diff --git
a/http/firefox/patches/0019-musl-make-SYS_fork-non-fatal-musl-uses-it-for-fork-2.patch
b/http/firefox/patches/0019-musl-make-SYS_fork-non-fatal-musl-uses-it-for-fork-2.patch
index c91fdea..2fa10f2 100644
---
a/http/firefox/patches/0019-musl-make-SYS_fork-non-fatal-musl-uses-it-for-fork-2.patch
+++
b/http/firefox/patches/0019-musl-make-SYS_fork-non-fatal-musl-uses-it-for-fork-2.patch
@@ -1,7 +1,7 @@
-From 84c982b24527501f238ee134218f6fc0a886200d Mon Sep 17 00:00:00 2001
+From 1d230c3955140ec3ad0420270572a381814fd4d5 Mon Sep 17 00:00:00 2001
From: Johannes <johannes.brechtmann AT gmail.com>
Date: Fri, 1 May 2020 17:20:29 +0200
-Subject: [PATCH 19/36] musl: make SYS_fork non-fatal, musl uses it for
fork(2)
+Subject: [PATCH 19/35] musl: make SYS_fork non-fatal, musl uses it for
fork(2)
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
@@ -9,10 +9,10 @@ Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
1 file changed, 4 insertions(+)
diff --git a/security/sandbox/linux/SandboxFilter.cpp
b/security/sandbox/linux/SandboxFilter.cpp
-index 4473da766a..73a6e7fd72 100644
+index 6b07186e8c..a4b69b08cf 100644
--- a/security/sandbox/linux/SandboxFilter.cpp
+++ b/security/sandbox/linux/SandboxFilter.cpp
-@@ -1479,6 +1479,10 @@ class ContentSandboxPolicy : public
SandboxPolicyCommon {
+@@ -1506,6 +1506,10 @@ class ContentSandboxPolicy : public
SandboxPolicyCommon {
// usually do something reasonable on error.
case __NR_clone:
return ClonePolicy(Error(EPERM));
@@ -21,8 +21,8 @@ index 4473da766a..73a6e7fd72 100644
+ return Error(ENOSYS);
+# endif
- # ifdef __NR_fadvise64
- case __NR_fadvise64:
+ case __NR_clone3:
+ return Error(ENOSYS);
--
2.32.0
b/http/firefox/patches/0020-musl-include-net-if.h-before-linux-if.h-to-avoid-red.patch
index 09bc79d..a057f9b 100644
---
a/http/firefox/patches/0020-musl-include-net-if.h-before-linux-if.h-to-avoid-red.patch
+++
b/http/firefox/patches/0020-musl-include-net-if.h-before-linux-if.h-to-avoid-red.patch
@@ -1,7 +1,7 @@
-From 50e1b3832d329934f36e380b702e0c5510ea9969 Mon Sep 17 00:00:00 2001
+From aef14ba62a0b721b25d7210aa02eb263edefb715 Mon Sep 17 00:00:00 2001
From: Rasmus Thomsen <oss AT cogitri.dev>
Date: Wed, 28 Oct 2020 17:50:24 +0100
-Subject: [PATCH 20/36] musl: include net/if.h before linux/if.h to avoid
+Subject: [PATCH 20/35] musl: include net/if.h before linux/if.h to avoid
redefinition
Bug: https://bugs.gentoo.org/751469
diff --git a/http/firefox/patches/0021-Make-PGO-use-toolchain.patch
b/http/firefox/patches/0021-Make-PGO-use-toolchain.patch
index e33fa31..a4b6c41 100644
--- a/http/firefox/patches/0021-Make-PGO-use-toolchain.patch
+++ b/http/firefox/patches/0021-Make-PGO-use-toolchain.patch
@@ -1,7 +1,7 @@
-From c3be81ca6b65ea5eb552656f64213dc8fe3a07b5 Mon Sep 17 00:00:00 2001
+From 96bdef8f186842d2d0a60dbcf9ce3654fee3ef2d Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Mon, 6 Apr 2020 20:13:34 +0200
-Subject: [PATCH 21/36] Make PGO use toolchain
+Subject: [PATCH 21/35] Make PGO use toolchain
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0022-bmo-1516081-Disable-watchdog-during-PGO-builds.patch
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0026-libaom-Use-NEON_FLAGS-instead-of-VPX_ASFLAGS-for-lib.patch
b/http/firefox/patches/0026-libaom-Use-NEON_FLAGS-instead-of-VPX_ASFLAGS-for-lib.patch
index 3656071..144cd2e 100644
---
a/http/firefox/patches/0026-libaom-Use-NEON_FLAGS-instead-of-VPX_ASFLAGS-for-lib.patch
+++
b/http/firefox/patches/0026-libaom-Use-NEON_FLAGS-instead-of-VPX_ASFLAGS-for-lib.patch
@@ -1,7 +1,7 @@
-From d2f86ccfa46c1a9a7dc18a92efc1358ad2fefe47 Mon Sep 17 00:00:00 2001
+From 8dd947f8ed85699d6dcbcf28e8bcfc15b3d3036c Mon Sep 17 00:00:00 2001
From: Mike Hommey <mh AT glandium.org>
Date: Mon, 26 Nov 2018 09:59:56 +0900
-Subject: [PATCH 26/36] libaom: Use NEON_FLAGS instead of VPX_ASFLAGS for
+Subject: [PATCH 26/35] libaom: Use NEON_FLAGS instead of VPX_ASFLAGS for
libaom neon code
# Make it an error to be missing function declarations for C code.
diff --git
a/http/firefox/patches/0028-LTO-Only-enable-LTO-for-Rust-when-complete-build-use.patch
b/http/firefox/patches/0028-LTO-Only-enable-LTO-for-Rust-when-complete-build-use.patch
index 8fe8fd6..1488fee 100644
---
a/http/firefox/patches/0028-LTO-Only-enable-LTO-for-Rust-when-complete-build-use.patch
+++
b/http/firefox/patches/0028-LTO-Only-enable-LTO-for-Rust-when-complete-build-use.patch
@@ -1,7 +1,7 @@
-From d5563aded6d64b67a4dfefdba87ea82357f9b43c Mon Sep 17 00:00:00 2001
+From c827acda5f8e2ff0794bbbe88137a75c653d55a6 Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Sat, 29 Aug 2020 22:30:59 +0200
-Subject: [PATCH 28/36] LTO: Only enable LTO for Rust when complete build uses
+Subject: [PATCH 28/35] LTO: Only enable LTO for Rust when complete build uses
LTO
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
@@ -10,7 +10,7 @@ Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
1 file changed, 2 insertions(+)
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git a/http/firefox/patches/0030-Disable-FFVPX-with-VA-API.patch
b/http/firefox/patches/0030-Disable-FFVPX-with-VA-API.patch
index 745b598..ad30be8 100644
--- a/http/firefox/patches/0030-Disable-FFVPX-with-VA-API.patch
+++ b/http/firefox/patches/0030-Disable-FFVPX-with-VA-API.patch
@@ -1,7 +1,7 @@
-From 163ac78289bf1abc7cfde4250fb494fa2fe3af2e Mon Sep 17 00:00:00 2001
+From 135a2dad031d75640d92e6d49783e26971918688 Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Thu, 29 Apr 2021 18:22:48 +0200
-Subject: [PATCH 30/36] Disable FFVPX with VA-API
+Subject: [PATCH 30/35] Disable FFVPX with VA-API
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0031-Enable-FLAC-on-platforms-without-ffvpx-via-ffmpeg.patch
b/http/firefox/patches/0031-Enable-FLAC-on-platforms-without-ffvpx-via-ffmpeg.patch
index f03dffb..63dcb19 100644
---
a/http/firefox/patches/0031-Enable-FLAC-on-platforms-without-ffvpx-via-ffmpeg.patch
+++
b/http/firefox/patches/0031-Enable-FLAC-on-platforms-without-ffvpx-via-ffmpeg.patch
@@ -1,7 +1,7 @@
-From 4e77c213ffec65e988199a66dbba97a5796f14e0 Mon Sep 17 00:00:00 2001
+From 2076e89dbbee44b08a68bd1df497f0c5d078dd7f Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Thu, 29 Apr 2021 18:48:06 +0200
-Subject: [PATCH 31/36] Enable FLAC on platforms without ffvpx via ffmpeg
+Subject: [PATCH 31/35] Enable FLAC on platforms without ffvpx via ffmpeg
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
---
diff --git
a/http/firefox/patches/0032-bmo-1670333-OpenH264-Fix-decoding-if-it-starts-on-no.patch
b/http/firefox/patches/0032-bmo-1670333-OpenH264-Fix-decoding-if-it-starts-on-no.patch
index 9b0e57e..4eac001 100644
---
a/http/firefox/patches/0032-bmo-1670333-OpenH264-Fix-decoding-if-it-starts-on-no.patch
+++
b/http/firefox/patches/0032-bmo-1670333-OpenH264-Fix-decoding-if-it-starts-on-no.patch
@@ -1,7 +1,7 @@
-From eab0f207b925d1da7a105b4f86d9fe34b089d64d Mon Sep 17 00:00:00 2001
+From 2314bea96fe6261b1606e2491c11e2c21fa53402 Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Fri, 11 Dec 2020 15:37:38 +0100
-Subject: [PATCH 32/36] bmo#1670333: OpenH264: Fix decoding if it starts on
non
+Subject: [PATCH 32/35] bmo#1670333: OpenH264: Fix decoding if it starts on
non
IDR I-frame
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
diff --git
a/http/firefox/patches/0033-bmo-1663844-OpenH264-Allow-using-OpenH264-GMP-decode.patch
b/http/firefox/patches/0033-bmo-1663844-OpenH264-Allow-using-OpenH264-GMP-decode.patch
index 8852983..ebf38ed 100644
---
a/http/firefox/patches/0033-bmo-1663844-OpenH264-Allow-using-OpenH264-GMP-decode.patch
+++
b/http/firefox/patches/0033-bmo-1663844-OpenH264-Allow-using-OpenH264-GMP-decode.patch
@@ -1,7 +1,7 @@
-From 29cdb142036bb638b9b8ed0eed3ec0985ab3e14d Mon Sep 17 00:00:00 2001
+From d64fdb286abcfaaae209b64d15a9811ffdacc250 Mon Sep 17 00:00:00 2001
From: Thomas Deutschmann <whissi AT gentoo.org>
Date: Fri, 11 Dec 2020 15:46:25 +0100
-Subject: [PATCH 33/36] bmo#1663844: OpenH264: Allow using OpenH264 GMP
decoder
+Subject: [PATCH 33/35] bmo#1663844: OpenH264: Allow using OpenH264 GMP
decoder
as fallback for video decoding
Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
diff --git
a/http/firefox/patches/0034-bmo-1646135-Disable-HW-WR-on-Nvidia-prop.-drivers-on.patch
b/http/firefox/patches/0034-bmo-1646135-Disable-HW-WR-on-Nvidia-prop.-drivers-on.patch
deleted file mode 100644
index 41eae64..0000000
---
a/http/firefox/patches/0034-bmo-1646135-Disable-HW-WR-on-Nvidia-prop.-drivers-on.patch
+++ /dev/null
@@ -1,35 +0,0 @@
-From eb2b14167139b890c45da22917429a3dd29f510c Mon Sep 17 00:00:00 2001
-From: Thomas Deutschmann <whissi AT gentoo.org>
-Date: Wed, 16 Jun 2021 02:13:33 +0200
-Subject: [PATCH 34/36] bmo#1646135: Disable HW-WR on Nvidia prop. drivers on
- Wayland
-
-Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
----
- widget/gtk/GfxInfo.cpp | 10 ++++++++++
- 1 file changed, 10 insertions(+)
-
-diff --git a/widget/gtk/GfxInfo.cpp b/widget/gtk/GfxInfo.cpp
-index fd6e7509fd..d3f3baf311 100644
---- a/widget/gtk/GfxInfo.cpp
-+++ b/widget/gtk/GfxInfo.cpp
-@@ -682,6 +682,16 @@ const nsTArray<GfxDriverInfo>&
GfxInfo::GetGfxDriverInfo() {
- nsIGfxInfo::FEATURE_BLOCKED_DEVICE, DRIVER_LESS_THAN, V(460, 32, 3,
0),
- "FEATURE_FAILURE_WEBRENDER_OLD_NVIDIA", "460.32.03");
-
-+ // Disable Nvidia proprietary drivers on Wayland.
-+ APPEND_TO_DRIVER_BLOCKLIST_EXT(
-+ OperatingSystem::Linux, ScreenSizeStatus::All, BatteryStatus::All,
-+ DesktopEnvironment::All, WindowProtocol::Wayland,
-+ DriverVendor::NonMesaAll, DeviceFamily::NvidiaAll,
-+ nsIGfxInfo::FEATURE_WEBRENDER, nsIGfxInfo::FEATURE_BLOCKED_DEVICE,
-+ DRIVER_COMPARISON_IGNORED, V(0, 0, 0, 0),
-+ "FEATURE_FAILURE_WEBRENDER_NVIDIA_WAYLAND",
-+ "https://bugzilla.mozilla.org/show_bug.cgi?id=1646135");
-+
- // ATI Mesa baseline, chosen arbitrarily.
- APPEND_TO_DRIVER_BLOCKLIST_EXT(
- OperatingSystem::Linux, ScreenSizeStatus::All, BatteryStatus::All,
---
-2.32.0
-
diff --git
a/http/firefox/patches/0034-bmo-1721326-Allow-dynamic-PTHREAD_STACK_MIN.patch
b/http/firefox/patches/0034-bmo-1721326-Allow-dynamic-PTHREAD_STACK_MIN.patch
new file mode 100644
index 0000000..0531051
--- /dev/null
+++
b/http/firefox/patches/0034-bmo-1721326-Allow-dynamic-PTHREAD_STACK_MIN.patch
@@ -0,0 +1,53 @@
+From 3626bb30aea10853c63830402470ecb3aa87a2c7 Mon Sep 17 00:00:00 2001
+From: Thomas Deutschmann <whissi AT gentoo.org>
+Date: Wed, 11 Aug 2021 02:22:11 +0200
+Subject: [PATCH 34/35] bmo#1721326: Allow dynamic PTHREAD_STACK_MIN
+
+Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
+---
+ js/xpconnect/src/XPCJSContext.cpp | 14 +++++++++-----
+ 1 file changed, 9 insertions(+), 5 deletions(-)
+
+diff --git a/js/xpconnect/src/XPCJSContext.cpp
b/js/xpconnect/src/XPCJSContext.cpp
+index e37c2638ae..4ece7b9df3 100644
+--- a/js/xpconnect/src/XPCJSContext.cpp
++++ b/js/xpconnect/src/XPCJSContext.cpp
+@@ -86,13 +86,10 @@ using namespace mozilla;
+ using namespace xpc;
+ using namespace JS;
+
+-// The watchdog thread loop is pretty trivial, and should not require much
stack
+-// space to do its job. So only give it 32KiB or the platform minimum.
++// We will clamp to reasonable values if this isn't set.
+ #if !defined(PTHREAD_STACK_MIN)
+ # define PTHREAD_STACK_MIN 0
+ #endif
+-static constexpr size_t kWatchdogStackSize =
+- PTHREAD_STACK_MIN < 32 * 1024 ? 32 * 1024 : PTHREAD_STACK_MIN;
+
+ static void WatchdogMain(void* arg);
+ class Watchdog;
+@@ -159,12 +156,19 @@ class Watchdog {
+ {
+ AutoLockWatchdog lock(this);
+
++ // The watchdog thread loop is pretty trivial, and should not
++ // require much stack space to do its job. So only give it 32KiB
++ // or the platform minimum. On modern Linux libc this might resolve to
++ // a runtime call.
++ size_t watchdogStackSize = PTHREAD_STACK_MIN;
++ watchdogStackSize = std::max<size_t>(32 * 1024, watchdogStackSize);
++
+ // Gecko uses thread private for accounting and has to clean up at
thread
+ // exit. Therefore, even though we don't have a return value from the
+ // watchdog, we need to join it on shutdown.
+ mThread = PR_CreateThread(PR_USER_THREAD, WatchdogMain, this,
+ PR_PRIORITY_NORMAL, PR_GLOBAL_THREAD,
+- PR_JOINABLE_THREAD, kWatchdogStackSize);
++ PR_JOINABLE_THREAD, watchdogStackSize);
+ if (!mThread) {
+ MOZ_CRASH("PR_CreateThread failed!");
+ }
+--
+2.32.0
+
diff --git
a/http/firefox/patches/0035-bmo-1715254-Deny-clone3-to-force-glibc-fallback.patch
b/http/firefox/patches/0035-bmo-1715254-Deny-clone3-to-force-glibc-fallback.patch
deleted file mode 100644
index 5b5fdd4..0000000
---
a/http/firefox/patches/0035-bmo-1715254-Deny-clone3-to-force-glibc-fallback.patch
+++ /dev/null
@@ -1,38 +0,0 @@
-From bb8fedf1391d759e787207f5b5f2a81b289b4772 Mon Sep 17 00:00:00 2001
-From: Thomas Deutschmann <whissi AT gentoo.org>
-Date: Mon, 12 Jul 2021 18:03:43 +0200
-Subject: [PATCH 35/36] bmo#1715254: Deny clone3 to force glibc fallback
-
-Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
----
- security/sandbox/linux/SandboxFilter.cpp | 7 +++++++
- 1 file changed, 7 insertions(+)
-
-diff --git a/security/sandbox/linux/SandboxFilter.cpp
b/security/sandbox/linux/SandboxFilter.cpp
-index 73a6e7fd72..f4e66fc148 100644
---- a/security/sandbox/linux/SandboxFilter.cpp
-+++ b/security/sandbox/linux/SandboxFilter.cpp
-@@ -835,6 +835,9 @@ class SandboxPolicyCommon : public SandboxPolicyBase {
- case __NR_clone:
- return ClonePolicy(InvalidSyscall());
-
-+ case __NR_clone3:
-+ return Error(ENOSYS);
-+
- // More thread creation.
- #ifdef __NR_set_robust_list
- case __NR_set_robust_list:
-@@ -1479,6 +1482,10 @@ class ContentSandboxPolicy : public
SandboxPolicyCommon {
- // usually do something reasonable on error.
- case __NR_clone:
- return ClonePolicy(Error(EPERM));
-+
-+ case __NR_clone3:
-+ return Error(ENOSYS);
-+
- # ifdef __NR_fork
- case __NR_fork:
- return Error(ENOSYS);
---
-2.32.0
-
diff --git
a/http/firefox/patches/0035-bmo-1721326-Use-small-stack-for-DoClone.patch
b/http/firefox/patches/0035-bmo-1721326-Use-small-stack-for-DoClone.patch
new file mode 100644
index 0000000..1976e08
--- /dev/null
+++ b/http/firefox/patches/0035-bmo-1721326-Use-small-stack-for-DoClone.patch
@@ -0,0 +1,49 @@
+From f680cce1b77a598656f585c8c11e9a88425443ac Mon Sep 17 00:00:00 2001
+From: Thomas Deutschmann <whissi AT gentoo.org>
+Date: Wed, 11 Aug 2021 02:22:26 +0200
+Subject: [PATCH 35/35] bmo#1721326: Use small stack for DoClone()
+
+Signed-off-by: Thomas Deutschmann <whissi AT gentoo.org>
+---
+ security/sandbox/linux/launch/SandboxLaunch.cpp | 13 +++++++++----
+ 1 file changed, 9 insertions(+), 4 deletions(-)
+
+diff --git a/security/sandbox/linux/launch/SandboxLaunch.cpp
b/security/sandbox/linux/launch/SandboxLaunch.cpp
+index d55acbc1a5..c7f7acd8d1 100644
+--- a/security/sandbox/linux/launch/SandboxLaunch.cpp
++++ b/security/sandbox/linux/launch/SandboxLaunch.cpp
+@@ -509,8 +509,7 @@ static int CloneCallee(void* aPtr) {
+ MOZ_NEVER_INLINE MOZ_ASAN_BLACKLIST static pid_t DoClone(int aFlags,
+ jmp_buf* aCtx) {
+ static constexpr size_t kStackAlignment = 16;
+- uint8_t miniStack[PTHREAD_STACK_MIN]
+- __attribute__((aligned(kStackAlignment)));
++ uint8_t miniStack[4096] __attribute__((aligned(kStackAlignment)));
+ #ifdef __hppa__
+ void* stackPtr = miniStack;
+ #else
+@@ -531,13 +530,19 @@ static pid_t ForkWithFlags(int aFlags) {
+ CLONE_CHILD_CLEARTID;
+ MOZ_RELEASE_ASSERT((aFlags & kBadFlags) == 0);
+
++ // Block signals due to small stack in DoClone.
++ sigset_t oldSigs;
++ BlockAllSignals(&oldSigs);
++
++ int ret = 0;
+ jmp_buf ctx;
+ if (setjmp(ctx) == 0) {
+ // In the parent and just called setjmp:
+- return DoClone(aFlags | SIGCHLD, &ctx);
++ ret = DoClone(aFlags | SIGCHLD, &ctx);
+ }
++ RestoreSignals(&oldSigs);
+ // In the child and have longjmp'ed:
+- return 0;
++ return ret;
+ }
+
+ static bool WriteStringToFile(const char* aPath, const char* aStr,
+--
+2.32.0
+
diff --git
a/http/firefox/patches/0036-bmo-1719674-Make-packed_simd-compile-with-Rust-1.54.patch
SOURCE_URL[0]="https://github.com/eqrion/${SPELL}/archive/v${VERSION}.tar.gz"
SOURCE2_URL[0]="https://smgl.bandrate.org/${SOURCE2}"
diff --git a/rust-crates/cbindgen/HISTORY b/rust-crates/cbindgen/HISTORY
index 8d7b9c5..1293f44 100644
--- a/rust-crates/cbindgen/HISTORY
+++ b/rust-crates/cbindgen/HISTORY
@@ -1,3 +1,6 @@
+2021-08-11 Pavel Vinogradov <public AT sourcemage.org>
+ * DETAILS: version 0.20.0
+
2021-07-04 Pavel Vinogradov <public AT sourcemage.org>
* DETAILS: version 0.19.0, cargo archive is left untouched, fixed
typo in scm url
[SM-Commit] GIT changes to master grimoire by Pavel Vinogradov (0e5c6b7279687eff6f22577fa6c9a4ce6c96d74f),
Pavel Vinogradov, 08/11/2021