[tbb-commits] [Git][tpo/applications/tor-browser-spec][main] Bug 40054: FF107 Audit

[richard (@richard)]

richard pushed to branch main at The Tor Project / Applications / tor-browser-spec


Commits:
724a427b by Richard Pospesel at 2023-09-11T23:48:58+00:00
Bug 40054: FF107 Audit

- - - - -


1 changed file:

- + audits/FF107_AUDIT


Changes:

=====================================
audits/FF107_AUDIT
=====================================
@@ -0,0 +1,72 @@
+# General
+
+The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript).
+
+The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation.
+
+`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit.
+
+## Firefox: https://github.com/mozilla/gecko-dev.git
+
+- Start: `ac898d40ded7de23ef22a6f336f2ab1f0bca0d3f` ( `FIREFOX_106_0_5_RELEASE` )
+- End:   `1187da3c99c93ad941eea0809d3b2c8f81ac5ccf`  ( `FIREFOX_107_0_1_RELEASE` )
+
+### Languages:
+- [x] java
+- [x] cpp
+- [x] js
+- [x] rust
+
+Nothing of interest (using `code_audit.sh`)
+
+---
+
+## Application Services: https://github.com/mozilla/application-services.git
+
+- Start: `f1276e45b7c284bc4435896b1d5d09b35f3b295b` ( `v95.0.1` )
+- End:   `ce8f1767d991da9d6d26331faecd426210071c7e`  ( `v96.1.0` )
+
+### Languages:
+- [x] java
+- [x] cpp
+- [x] js
+- [x] rust
+
+Nothing of interest (using `code_audit.sh`)
+
+## Android Components: https://github.com/mozilla-mobile/android-components.git
+
+- Start: `1c48533cff068056259e62861344bd8a490a83e7`
+- End:   `ff4f1f8ae3c12e6f6e0dcf52f88049ca251470d8`  ( `v107.0.3` )
+
+### Languages:
+- [x] java
+- [x] cpp
+- [x] js
+- [x] rust
+
+Nothing of interest (using `code_audit.sh`)
+
+## Fenix: https://github.com/mozilla-mobile/fenix.git
+
+- Start: `8c088f08d339514ac12732bffdc9bb90540d9337` ( `v107.0b1` )
+- End:   `1490acda7e44894c8437cc7fb677d3fba1a711ce`  ( `v107.2.0` )
+
+### Languages:
+- [x] java
+- [x] cpp
+- [x] js
+- [x] rust
+
+Nothing of interest (using `code_audit.sh`)
+
+## Ticket Review ##
+
+Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=107%20Branch&order=priority%2Cbug_severity&limit=0`
+
+where `$(FIREFOX_VERSION)` is the major Firefox version we are auditing (eg: '91')
+
+Nothing of interest (manual inspection)
+
+## Export
+- [x] Export Report and save to `tor-browser-spec/audits`
\ No newline at end of file



View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/724a427b5a24e3163c54d595186212fa4601cbdc

-- 
View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/724a427b5a24e3163c54d595186212fa4601cbdc
You're receiving this email because of your account on gitlab.torproject.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tbb-commits/attachments/20230911/567e21ec/attachment-0001.htm>