commit d68aa868ef206168b44c639ac83ddae6274070fc Author: Matthew Finkel sysrqb@torproject.org Date: Tue Dec 8 23:06:41 2020 +0000

Update Fenix84 net audit --- audits/FF84_NETWORK_AUDIT | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/audits/FF84_NETWORK_AUDIT b/audits/FF84_NETWORK_AUDIT index 039dd96..a4c6ee0 100644 --- a/audits/FF84_NETWORK_AUDIT +++ b/audits/FF84_NETWORK_AUDIT @@ -1,4 +1,4 @@ -`git diff 1cb2c4893850a5b0a246f821a6390c07064c1227 9e429e392ec8446ff0f078f991d6332a307bc98f` +`git diff 1cb2c4893850a5b0a246f821a6390c07064c1227 11898884c81cd84cfaec46dffe1dbf42517e8301` and then go over all the changes containing the below mentioned potentially dangerous calls and features. Grep the diff for the following strings and examine surrounding usage. @@ -33,6 +33,13 @@ TRR (DNS Trusted Recursive Resolver) # Bug 1673590: # - Still protected by https://bugzil.la/1636411

+# Bug 1674088: +# - Increase TRR max failures and add new pref +# |network.trr.retry-timeout-ms| + +# Bug 1677806 +# - Set network.dns.dns_query_single_label to false +

Direct Paths to DNS resolution: nsDNSService::Resolve @@ -139,14 +146,14 @@ End: 6a234c2b1e1972f11e585551d4cf2e40e84bf16f # v67.0.0 ============ Android Components Portion =============

Start: 0a2993d44aae3d877bb97cee925096f83af01b3a # v63.0.8 -End: 614386935ec94cac531eb8cb061409e9a8410d09 # v67.0.3 +End: 89973898761d54c7512bb74ea2c3489fca07bf8e # v67.0.10

# FF84: Zero new usage found of known proxy-bypass APIs (using `java_audit.sh`)

============ Fenix Portion =============

Start: 5441935698f4d9e3606f3d6baf892f6e0106a2f6 # v83.1.0-rc.1 -End: 670e61b2b97d4f8066497e79178729c5802fe428 # v84.0.0-beta.2 +End: 8b4b9bde5f2dab9fec1631fbfc70d4e2c3b2d24e # v84.1.0-rc.1

# FF84: Zero new usage found of known proxy-bypass APIs (using `java_audit.sh`)