| Commit message (Collapse) | Author | Age |
|---|
| |
|
|
| |
Thanks to dcf for finding the cause of the problem.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
| |
Changelog update, version bumps, and config.yml update
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
| |
This reverts commit e8178d1373d6ce2599ef58eca4d52d1b6817263f.
That's properly fixed in NoScript >= 5.0.7.1, thus removing our
workaround.
|
| | |
|
| |
|
|
| |
This fixes bug 22067.
|
| | |
|
| |
|
|
|
|
| |
We bump our GCC compiler to 5.4.0 as this fixes some bugs
in previous versions. It allows us in particular to build
debug builds for Windows with mingw-w64.
|
| |
|
|
| |
Found by boklm.
|
| |
|
|
| |
Whitelist about:tor so that NoScript does not block its JavaScript.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I had to apply two tricks to get a reproducible snowflake-client.
The first is to use faketime to eliminate some timestamps. There were 11
variable timestamps in the file. Through experimentation, I found that
10 of them were dependent on the Go runtime (recompiling Go caused them
to change) and 1 was dependent on snowflake-client itself (recompiling
snowflake-client with the same runtime changed only that 1 timestamp).
The underlying issue has to do with clang 3.8.0 on Darwin embedding
timestamps, unsolved in the Go issue tracker as of 13 days ago.
https://github.com/golang/go/issues/9206#issuecomment-310476743
The second is a sed command to clobber embedded paths of the form
/tmp/go-buildXXXXXXXXX and /tmp/go-link-XXXXXXXXX. Their presence is
caused by some combination of Clang and Darwin, and there is as yet no
known workaround upstream.
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Object files from elsewhere under out/ should never have been included,
because they are not part of webrtc itself, but rather side-effect build
artifacts like gn. Including those extraneous .o files was mostly
harmless (except for library size), because on linux they happened to be
the same architecture as the webrtc.o files. However it won't work for
the mac build (because libwebrtc-magic.a would include a mix of linux
ELF and mac Mach-O objects). Additionally, build_time.o, part of the gn
build, embeds a timestamp with month resolution, causing a failure of
reproducibility, as found at https://bugs.torproject.org/22832.
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
| |
"10.9" was the wrong `minSupportedOSVersion` for preventing OS X 10.7.x
and 10.8.x users from getting updated to Tor Browser 7. That it worked
for OS X 10.6.x was only by chance according to the release history table
(https://en.wikipedia.org/wiki/Darwin_(operating_system)#Release_history).
We fix that by choosing "13.0.0" (for OS X 10.9 as minimum).
|
| | |
|
| |
|
|
| |
Changelog update, version bumps, and config.yml update
|
| |
|
|
|
| |
Due to a bug in NoScript's XSS filter Tor Browser freezes on some websites.
We disable that filter for now while waiting on a NoScript update.
|
| |
|
|
| |
Those wrappers are no longer necessary to produce PIE binaries.
|
| | |
|
| | |
|
| |
|
|
|
| |
We need to allow JavaScript on `about:cache` explicitly. Otherwise it is
broken on higher security levels.
|
| | |
|
| |
|
|
|
|
|
|
|
| |
With the changes to integrate Selfrando (#20683), we are using our build
of gcc and binutils to build other libraries in the linux/gitian-utils.yml
descriptor, which removed the use of the hardening wrappers. We fix that
by adding the hardening wrappers to our builds of gcc and binutils.
Because we add the wrappers to gcc and binutils zip files, we don't need
to add them anymore in the other descriptors where they are used.
|
| |
|
|
|
|
|
|
| |
This reverts commit f27d2cab4ed80a4c7b4f594b593b6b90f6148a82.
The problem was the script for recreating the .dmg files after the
code-signing set the permissions wrong. No need to fix anything in the
bundle descriptor.
|
| | |
|
| |
|
|
|
| |
We don't ship the clearkey DRM system yet, thus we don't need to strip
the respective binaries.
|
| |
|
|
|
| |
We need to allow JavaScript on `about:tabcrashed` pages explicitly.
Otherwise are those pages broken on higher security levels.
|
| |
|
|
|
|
| |
Add the hardened wrappers to the PATH before running the firefox
configure script. It seems that the wrappers are not used in the build
if they were not in the PATH during the configure step.
|
| | |
|
| |
|
|
| |
This makes it easier to track build times.
|
| | |
|
| |
|
|
| |
Version bumps, Changelog update, and update of config.yml
|
