diff options
| author | Mark H Weaver <mhw@netris.org> | 2015-01-16 03:52:05 -0500 |
|---|---|---|
| committer | Mark H Weaver <mhw@netris.org> | 2015-01-16 09:14:08 -0500 |
| commit | 2a666e9cfddc5ec25831618bc376ab4ca6692527 (patch) | |
| tree | ea21d6d2100179e96b5948a2e3361d838ba0b148 /gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch | |
| parent | 57b7e1a62d2269bfd9d37f88bae92c829222f8fc (diff) | |
| download | guix-2a666e9cfddc5ec25831618bc376ab4ca6692527.tar.gz | |
gnu: icecat: Add fixes for CVE-2014-{8634,8638,8639,8641}.
* gnu/packages/patches/icecat-CVE-2014-8634-pt1.patch, gnu/packages/patches/icecat-CVE-2014-8634-pt2.patch, gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch, gnu/packages/patches/icecat-CVE-2014-8638-pt2.patch, gnu/packages/patches/icecat-CVE-2014-8639.patch, gnu/packages/patches/icecat-CVE-2014-8641.patch, gnu/packages/patches/icecat-armhf-xpcom.patch: New files. * gnu-system.am (dist_patch_DATA): Add them. * gnu/packages/gnuzilla.scm (icecat)[source]: Add patches.
Diffstat (limited to 'gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch')
| -rw-r--r-- | gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch | 27 |
1 files changed, 27 insertions, 0 deletions
diff --git a/gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch b/gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch new file mode 100644 index 0000000000..83ee5fc79e --- /dev/null +++ b/gnu/packages/patches/icecat-CVE-2014-8638-pt1.patch @@ -0,0 +1,27 @@ +From 0c4a326295bdb37742fe23f0395916d2ba8ade53 Mon Sep 17 00:00:00 2001 +From: Christoph Kerschbaumer <mozilla@christophkerschbaumer.com> +Date: Wed, 19 Nov 2014 16:03:39 -0800 +Subject: [PATCH 1/2] Bug 1080987 - navigator.sendBeacon() needs to sent origin + header. r=sicking, a=bkerensa + +--- + dom/base/Navigator.cpp | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/dom/base/Navigator.cpp b/dom/base/Navigator.cpp +index 0f03ad3..020e370 100644 +--- a/dom/base/Navigator.cpp ++++ b/dom/base/Navigator.cpp +@@ -1265,6 +1265,9 @@ Navigator::SendBeacon(const nsAString& aUrl, + principal, + true); + ++ rv = cors->Init(channel, true); ++ NS_ENSURE_SUCCESS(rv, false); ++ + // Start a preflight if cross-origin and content type is not whitelisted + rv = secMan->CheckSameOriginURI(documentURI, uri, false); + bool crossOrigin = NS_FAILED(rv); +-- +2.1.2 + |