richard pushed to branch main at The Tor Project / Applications / tor-browser-spec

Commits: 724a427b by Richard Pospesel at 2023-09-11T23:48:58+00:00 Bug 40054: FF107 Audit

- - - - -

1 changed file:

- + audits/FF107_AUDIT

Changes:

===================================== audits/FF107_AUDIT ===================================== @@ -0,0 +1,72 @@ +# General + +The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript). + +The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation. + +`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit. + +## Firefox: https://github.com/mozilla/gecko-dev.git + +- Start: `ac898d40ded7de23ef22a6f336f2ab1f0bca0d3f` ( `FIREFOX_106_0_5_RELEASE` ) +- End: `1187da3c99c93ad941eea0809d3b2c8f81ac5ccf` ( `FIREFOX_107_0_1_RELEASE` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +--- + +## Application Services: https://github.com/mozilla/application-services.git + +- Start: `f1276e45b7c284bc4435896b1d5d09b35f3b295b` ( `v95.0.1` ) +- End: `ce8f1767d991da9d6d26331faecd426210071c7e` ( `v96.1.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Android Components: https://github.com/mozilla-mobile/android-components.git + +- Start: `1c48533cff068056259e62861344bd8a490a83e7` +- End: `ff4f1f8ae3c12e6f6e0dcf52f88049ca251470d8` ( `v107.0.3` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Fenix: https://github.com/mozilla-mobile/fenix.git + +- Start: `8c088f08d339514ac12732bffdc9bb90540d9337` ( `v107.0b1` ) +- End: `1490acda7e44894c8437cc7fb677d3fba1a711ce` ( `v107.2.0` ) + +### Languages: +- [x] java +- [x] cpp +- [x] js +- [x] rust + +Nothing of interest (using `code_audit.sh`) + +## Ticket Review ## + +Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolutio... + +where `$(FIREFOX_VERSION)` is the major Firefox version we are auditing (eg: '91') + +Nothing of interest (manual inspection) + +## Export +- [x] Export Report and save to `tor-browser-spec/audits` \ No newline at end of file

View it on GitLab: https://gitlab.torproject.org/tpo/applications/tor-browser-spec/-/commit/724...