summary refs log tree commit diff
path: root/gnu/packages/patches/icecat-CVE-2015-4495.patch
diff options
context:
space:
mode:
authorMark H Weaver <mhw@netris.org>2015-10-13 15:56:32 -0400
committerMark H Weaver <mhw@netris.org>2015-10-14 01:41:56 -0400
commit9f7ae77fe287d7856718c5dfd60891be9b561b1d (patch)
treebe9b00c7f6110d41c5e3450bc784ffe81ef1805b /gnu/packages/patches/icecat-CVE-2015-4495.patch
parent837294b7a431eaecbaf9336e574fe23d55d40d42 (diff)
downloadguix-9f7ae77fe287d7856718c5dfd60891be9b561b1d.tar.gz
gnu: icecat: Update to 38.3.0-gnu1.
* gnu/packages/patches/icecat-CVE-2015-4473-partial.patch,
  gnu/packages/patches/icecat-CVE-2015-4482.patch,
  gnu/packages/patches/icecat-CVE-2015-4488.patch,
  gnu/packages/patches/icecat-CVE-2015-4489.patch,
  gnu/packages/patches/icecat-CVE-2015-4491.patch,
  gnu/packages/patches/icecat-CVE-2015-4492.patch,
  gnu/packages/patches/icecat-CVE-2015-4495.patch,
  gnu/packages/patches/icecat-enable-acceleration-and-webgl.patch,
  gnu/packages/patches/icecat-libvpx-1.4.patch: Delete files.
* gnu/packages/patches/icecat-avoid-bundled-includes.patch: New file.
* gnu-system.am (dist_patch_DATA): Add new patch.  Remove the deleted ones.
* gnu/packages/gnuzilla.scm (icecat): Update to 38.3.0-gnu1.
  [source]: Add new patch.  Remove the deleted ones.
  [inputs]: Add libxcomposite.
  [arguments]: Add 'ensure-no-mtimes-pre-1980' phase.  Adapt
  'remove-h264parse-from-blacklist' and
  'arrange-to-link-libxul-with-libraries-it-might-dlopen' phases to the
  new version.
Diffstat (limited to 'gnu/packages/patches/icecat-CVE-2015-4495.patch')
-rw-r--r--gnu/packages/patches/icecat-CVE-2015-4495.patch28
1 files changed, 0 insertions, 28 deletions
diff --git a/gnu/packages/patches/icecat-CVE-2015-4495.patch b/gnu/packages/patches/icecat-CVE-2015-4495.patch
deleted file mode 100644
index e7514d9a5e..0000000000
--- a/gnu/packages/patches/icecat-CVE-2015-4495.patch
+++ /dev/null
@@ -1,28 +0,0 @@
-Backported from upstream commits labelled "Bug 1178058" from the esr38 branch
-by Boris Zbarsky <bzbarsky@mit.edu> and Bobby Holley <bobbyholley@gmail.com>.
-
---- icecat-31.8.0/docshell/base/nsDocShell.cpp
-+++ icecat-31.8.0/docshell/base/nsDocShell.cpp
-@@ -1546,12 +1546,21 @@
- 
-     if (owner && mItemType != typeChrome) {
-         nsCOMPtr<nsIPrincipal> ownerPrincipal = do_QueryInterface(owner);
--        if (nsContentUtils::IsSystemOrExpandedPrincipal(ownerPrincipal)) {
-+        if (nsContentUtils::IsSystemPrincipal(ownerPrincipal)) {
-             if (ownerIsExplicit) {
-                 return NS_ERROR_DOM_SECURITY_ERR;
-             }
-             owner = nullptr;
-             inheritOwner = true;
-+        } else if (nsContentUtils::IsExpandedPrincipal(ownerPrincipal)) {
-+            if (ownerIsExplicit) {
-+                return NS_ERROR_DOM_SECURITY_ERR;
-+            }
-+            // Don't inherit from the current page.  Just do the safe thing
-+            // and pretend that we were loaded by a nullprincipal.
-+            owner = do_CreateInstance("@mozilla.org/nullprincipal;1");
-+            NS_ENSURE_TRUE(owner, NS_ERROR_FAILURE);
-+            inheritOwner = false;
-         }
-     }
-     if (!owner && !inheritOwner && !ownerIsExplicit) {