| OLD | NEW |
| 1 Name: Network Security Services (NSS) | 1 Name: Network Security Services (NSS) |
| 2 Short Name: nss | 2 Short Name: nss |
| 3 URL: http://www.mozilla.org/projects/security/pki/nss/ | 3 URL: http://www.mozilla.org/projects/security/pki/nss/ |
| 4 Version: 3.16.5 | 4 Version: 3.16.5 |
| 5 License: MPL 2 | 5 License: MPL 2 |
| 6 License File: nss/COPYING | 6 License File: nss/COPYING |
| 7 Security Critical: yes | 7 Security Critical: yes |
| 8 | 8 |
| 9 Description: | 9 Description: |
| 10 NSS 3.16.5 with NSPR 4.10.7 | 10 NSS 3.16.5 with NSPR 4.10.7 |
| (...skipping 18 matching lines...) Expand all Loading... |
| 29 We made the following local changes to NSPR. | 29 We made the following local changes to NSPR. |
| 30 - patches/nspr-static.patch: to build NSPR as static libraries. See NSPR | 30 - patches/nspr-static.patch: to build NSPR as static libraries. See NSPR |
| 31 bug 533014 (https://bugzilla.mozilla.org/show_bug.cgi?id=533014). | 31 bug 533014 (https://bugzilla.mozilla.org/show_bug.cgi?id=533014). |
| 32 - patches/prcpucfg.h: added to the nspr/pr/include directory. | 32 - patches/prcpucfg.h: added to the nspr/pr/include directory. |
| 33 - patches/nspr-attach-as-system-thread.patch: attach a "foreign" thread | 33 - patches/nspr-attach-as-system-thread.patch: attach a "foreign" thread |
| 34 (a thread not created by NSPR) to NSPR as a "system" thread rather than | 34 (a thread not created by NSPR) to NSPR as a "system" thread rather than |
| 35 a "user" thread, which needs to terminate before PR_Cleanup can return. | 35 a "user" thread, which needs to terminate before PR_Cleanup can return. |
| 36 (The "system" vs. "user" thread distinction comes from Java, and | 36 (The "system" vs. "user" thread distinction comes from Java, and |
| 37 ultimately from Solaris threads.) This is a workaround for | 37 ultimately from Solaris threads.) This is a workaround for |
| 38 http://crbug.com/40663. | 38 http://crbug.com/40663. |
| 39 - patches/nspr-no-pointers-in-longs.patch Don't store pointers in longs. |
| 40 Pointers can be 64-bit, and longs are only 32-bit on Windows. See |
| 41 https://bugzilla.mozilla.org/show_bug.cgi?id=1105144 |
| 39 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS | 42 - patches/nspr-remove-io.patch: Remove IO operations in NSPR to allow NSS |
| 40 to work in the sandbox. Do not initialize IO when initializing NSPR. | 43 to work in the sandbox. Do not initialize IO when initializing NSPR. |
| 41 Windows version of NSPR also tried to use getaddrinfo to resolve hostname | 44 Windows version of NSPR also tried to use getaddrinfo to resolve hostname |
| 42 in a SSL connection. By removing _PR_HAVE_GETADDRINFO this will force it | 45 in a SSL connection. By removing _PR_HAVE_GETADDRINFO this will force it |
| 43 to use PR_GetHostByName. Removing _PR_INET6_PROBE will prevent it from | 46 to use PR_GetHostByName. Removing _PR_INET6_PROBE will prevent it from |
| 44 creating an IPv6 socket to probe if IPv6 is there. | 47 creating an IPv6 socket to probe if IPv6 is there. |
| 45 DO NOT upstream this patch. | 48 DO NOT upstream this patch. |
| 46 | 49 |
| 47 We made the following local changes to NSS. | 50 We made the following local changes to NSS. |
| 48 - patches/nss-static.patch: to build NSS as static libraries and omit | 51 - patches/nss-static.patch: to build NSS as static libraries and omit |
| (...skipping 13 matching lines...) Expand all Loading... |
| 62 and Mac OS X. This works around the inability to specify target arch | 65 and Mac OS X. This works around the inability to specify target arch |
| 63 specific source files in Xcode. | 66 specific source files in Xcode. |
| 64 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support | 67 - patches/nss-remove-fortezza.patch: remove Fortezza certificate support |
| 65 from PK11_ImportPublicKey. See NSS bug 668397 | 68 from PK11_ImportPublicKey. See NSS bug 668397 |
| 66 (https://bugzilla.mozilla.org/show_bug.cgi?id=668397). | 69 (https://bugzilla.mozilla.org/show_bug.cgi?id=668397). |
| 67 - patches/nss-urandom-abort.patch: call abort() if NSS cannot read from | 70 - patches/nss-urandom-abort.patch: call abort() if NSS cannot read from |
| 68 /dev/urandom. See Chromium issue 244661 (http://crbug.com/244661). | 71 /dev/urandom. See Chromium issue 244661 (http://crbug.com/244661). |
| 69 - patches/nss-chacha20-poly1305.patch: Support ChaCha20+Poly1305 cipher | 72 - patches/nss-chacha20-poly1305.patch: Support ChaCha20+Poly1305 cipher |
| 70 suites. See NSS bug 917571 | 73 suites. See NSS bug 917571 |
| 71 (https://bugzilla.mozilla.org/show_bug.cgi?id=917571). | 74 (https://bugzilla.mozilla.org/show_bug.cgi?id=917571). |
| OLD | NEW |