From MozillaWiki
Jump to: navigation, search

« previous week | index | next week »

Platform Meeting Details

  • Tuesdays - 11:00 am Pacific
  • Dial-in: Audio-only conference# 95312
    • People with Mozilla phones or softphones please dial x4000 Conf# 95312
    • US/Toll-free: +1 800 707 2533, (pin 4000) Conf# 95312
    • US/California/Mountain View: +1 650 903 0800, x4000 Conf# 95312
    • US/California/San Francisco: +1 415 762 5700, x4000 Conf# 95312
    • US/Oregon/Portland: +1 971 544 8000, x4000 Conf# 95312
    • CA/British Columbia/Vancouver: +1 778 785 1540, x4000 Conf# 95312
    • CA/Ontario/Toronto: +1 416 848 3114, x4000 Conf# 95312
    • UK/London: +44 (0)207 855 3000, x4000 Conf# 95312
    • FR/Paris: +33 1 84 88 37 37, x4000 Conf# 95312
    • Gmail Chat (requires Flash and the Google Talk plugin): paste +1 650 903 0800 into the Gmail Chat box that doesn't look like it accepts phone numbers
    • SkypeOut is free if you use the 800 number
  • Warp Core Vidyo Room
  • join #planning for back channel


Notices / Schedule

  • If you have no more blockers for FF12 and the next ESR (released 4/24), please start digging into bugs tracked for FF13

Firefox Development

  • Jared Wein landed initial support for click to play plugins on desktop (bug 711552)
    • Followup work in bug 711618 to improve permissions model

Firefox Developer Tools

Add-on SDK

  • There were delays getting AMO updated with the 1.6 SDK last week so some developers may have seen warnings when uploading their add-ons
  • Spinning a 1.6.1 release to fix a minor leak


  • This week's Snappy summary
  • Ehsan discovered some really bad performance issues for animated skins or those that heavily use svg and css
    • Will look at moving image decoding off of the main thread
  • Vlad worked on cancellable sql (bug 722243), have to figure out if the benefit from cancellable queries justifies additional locking
  • Vlad is analyzing a batch of slow startup data from March
  • Anthony and QA team are chrome leak testing looking for leaked documents that should be cycle collected
  • Tim put up AreWeSmallYet, tracking changes in build size:
  • Bill disabled incremental GC due to leaks bug 641025
  • mccra8 removed more stuff from the CC graph (bug 740185)


  • Continue to be focused on mobile Firefox.
    • We fixed most of Firefox on Android's extreme crashiness, with the notable exception of on David Baron's phone, who alone accounts for 13% of our crashes (221 unique crash IDs) in the past week, the #1 topcrasher by a large margin.
    • We're focused on performance and checkerboardiness now, with our major work being tracked as Fennec beta blockers.



  • Focused on mobile Firefox.
    • Readability.
    • Scrolling/Zoom bugs.


  • MediaStreams near landing on m-c
  • Initial WebRTC landings being planned (preffed off).


  • No updates today.







Tree Management

  • hg.m.o downtime Thursday April 12 6-9am PDT for migration to new datacentre
  • Switching OSX build machines today hopefully - nightly updates will be diverted until testing is completed
  • tree status app in staging for poking:
  • infrastructure load for march
    • 4,508 pushes in March - peaking at 238 checkins per day
    • 5th month in a row of record activity


Date / Time Item
Mon Apr 9 / 13:00 PST BrowserID Sync
Wed Apr 11 / 13:00 PST AVAILABLE
Thu Apr 12 / 10:00 PST AVAILABLE
Fri Apr 13 / 10:00 AM PST AVAILABLE

Calendar and Meeting details

General Meeting Details 
* IRC Channel: #security 
* Etherpad: 
* Vidyo: (Room 9058)
* Dial-in Info (phone): 
** In office or soft phone: extension 92 
** US/INTL: 650-903-0800 or 650-215-1282 then extension 92 
** Toronto: 416-848-3114 then extension 92 
** Toll-free: 800-707-2533 then password 369 
** Conference num 99058

For updates to meetings please see the Security Review Calendar

Security Review Needed but Unscheduled

Review Needed

  • Feature pages triaged to need review, review unscheduled
Feature Feature List Target Rel Prod Mgr Lead Engr Security lead Security status Security notes Last Modified
Client-side XPI construction Jetpack Add-on Builder 2 Daniel Buchner Piotr Zalewa/Sean McArthur `sec-review-needed `2012-04-12T20:05:12
Add-On Tab API ` Add-on SDK 1.5 David Mason ` Dan Veditzsec-review-needed bug 7449132012-04-12T20:10:51
B2G App Security and Privacy Model ` B2G 1.0 Lucas Adamski Jonas Sicking, Chris Jones Paul Theriaultsec-review-needed bug 7449152013-11-22T18:35:41
Style Editor Desktop Firefox 11 Kevin Dangoor Cedric Vivier `sec-review-needed bug 7449212012-08-30T13:42:53
Migrate Chrome settings and data Desktop Firefox 11 Asa Dotzler Makoto Kato, Marco Bonardo `sec-review-needed bug 7449192012-04-12T20:17:13
Generic Thumbnail Service Platform Firefox 12 ` Tim Taubert `sec-review-needed 2012-05-16T23:15:03
Easy UI Feature Testing and "Success Evaluation" (integrate TestPilot like features) ` Firefox 13 ` ` `sec-review-needed Please schedule with curtisk2012-03-02T23:41:56
Hang Detector and Reporter Desktop Firefox 14 Asa Dotzler Vladan Djeric `sec-review-needed bug 7449262012-04-18T19:50:16
Install and Uninstall Web Apps in Firefox ` Firefox 15 Ragavan Srinivasan ` `sec-review-needed 2012-06-05T21:53:38
Responsive View Desktop Firefox 15 Kevin Dangoor Paul Rouget `sec-review-needed 2012-08-30T13:40:32
In-content preferences Desktop Firefox 15 Asa Dotzler Jon Rietveld `sec-review-needed bug 7449362012-05-07T14:15:25
Camera API Phase 2 - based on getUserMedia Mobile Firefox 15 - Mobile only, still image support only Maire Reavy Anant Narayanan Lucas Adamski (currently) Curtis Koenig (soon)sec-review-needed bug 7492212012-10-16T07:15:46
Media Plugin API (MPAPI) Mobile Firefox 15 or 16 (TBD) - Mobile only, by the end of Q2 Maire Reavy Rob O'Callahan (formerly Andreas Gal) TBDsec-review-needed bug 7492212012-06-06T02:40:33
Feature name here ` Firefox 16 Karen Rudnitski Brad Lassey `sec-review-needed 2012-08-31T17:39:44
Firefox Social Integration Desktop Firefox 17 Asa Dotzler Shane Caraveo Michael Coatessec-review-needed bug 7334142014-04-11T05:29:17
HTML Tree Editor Desktop Firefox 17 Kevin Dangoor Dave Camp `sec-review-needed 2012-09-17T17:04:20
Show PDF inline Platform Firefox 18 Asa Dotzler Bill Walker `sec-review-needed 2012-10-04T13:16:57
Per-Site Third-Party Cookie Setting Platform Firefox 18 ` ` Curtis Koenigsec-review-needed 2013-02-08T17:31:48
Windows Plugin Hang UI Desktop Firefox 19 asa Aaron Klotz `sec-review-needed 2012-10-29T15:51:21
Tools In Windows Desktop Firefox 20 Kevin Dangoor Paul Rouget `sec-review-needed 2013-08-01T20:30:23
JavaScript Profiling Desktop Firefox 20 Kevin Dangoor Anton Kovalyov `sec-review-needed 2013-08-01T20:31:39
Network View Desktop Firefox 23 Kevin Dangoor ` `sec-review-needed assigned to mgoodwin2013-08-14T21:07:34
Downloads API Desktop Firefox 26 ` Paolo Amadini `sec-review-needed assigned to mgoodwin to look at via sec-review? in bug 8255882013-10-25T09:40:01
Panel Menu Desktop Firefox 29 Asa Dotzler Blair McBride `sec-review-needed sec review work to be done by freddyb2014-05-15T03:04:34
FlightDeck as a Client-side App Jetpack FlightDeck 1.0 Daniel Buchner Sean McArthur `sec-review-needed when ready sched w/ curtisk2012-01-25T22:43:38
IndexedDB Support for Multi-Process Firefox Platform Future, distant future. Chris Blizzard ` `sec-review-needed 2011.10.17: sid recommends we wait on this one but likely needs a review. bug 7449402012-04-12T20:52:20
Simplify signing XPIs in Jetpack Jetpack Jetpack Future Dave Mason ` `sec-review-needed 2012-06-05T22:46:09
Purchase PIN Marketplace Marketplace July Justin Scott Unassigned Raymond Forbessec-review-needed 2016-04-01T02:19:58
Notifications Other Q3 None Assigned, One has been requested JR Colin David Chansec-review-needed bug 7498062012-05-09T17:00:36
Sharing textures cross-process for Electrolysis Platform Q4 of 2011. Chris Blizzard Chris Jones `sec-review-needed bug 7449442013-07-22T07:19:02
SDK Support for Firefox for Mobile Addons Jetpack SDK 1.5 David Mason Matteo Ferretti `sec-review-needed bug 7449462012-04-12T21:04:55
Apps Management App ` TBD ` ` `sec-review-needed 2012-08-31T17:38:35
Modern MIME Parser Thunderbird Thunderbird 16 ` Joshua Cranmer `sec-review-needed bug 7449522012-05-31T14:31:02
Thunderbird Metro Thunderbird Thunderbird 17 ` ` `sec-review-needed 2012-07-22T02:29:05
SMS support in Thunderbird Thunderbird Thunderbird 19 ` ` `sec-review-needed
Modern Address Book - V1 Thunderbird Under revision ` Mike Conley `sec-review-needed bug 7449552012-05-16T17:16:47
Speedy Session Restore Desktop ` Asa Dotzler Dietrich Ayala `sec-review-needed bug 7449342012-07-23T20:43:45
Enhancements to help mitigate search hijacking Desktop ` Asa Dotzler Gavin Sharp Al Billingssec-review-needed bug 7449572012-07-18T01:36:50
Blocklist UX enhancements [Plug-ins] Desktop ` Kev Needham ` `sec-review-needed bug 7449622012-04-12T21:40:01
Sign into the browser Other ` Dan Mills Ben Adida `sec-review-needed bug 7449482012-07-26T22:36:15
Add plugincheck functionality to Add-on Manager Desktop ` Kev Needham ` `sec-review-needed bug 7449672012-04-12T21:46:41
DOMCryptAPI (a Crypto API in the DOM) Platform ` Chris Blizzard David Dahl Brian Smithsec-review-needed bug 7449382013-11-22T19:02:09
Native Sign In to Website Desktop ` ` Austin King (ozten) `sec-review-needed `2013-10-18T23:50:02

Bugs marked sec-review-needed that need to be scheduled

No results.

0 Total; 0 Open (0%); 0 Resolved (0%); 0 Verified (0%);

Stability Report


  • Due to a file name pattern change by Adobe, the version of current Flash releases isn't detected by Socorro (bug 742735). This also makes KaiRo's Flash crash/hang reports not list those 11.2.* versions - a fix is ready for landing and should be deployed in tomorrow's Socorro release.



  • bug 741715 crash in XPCWrappedNativeProto::TraceJS
  • bug 743767 Firefox crash @ memcpy | GlyphBufferAzure::Flush


  • bug 744043 Firefox crash [@ gfxASurface::GetType()


  • bug 717175 - gfxFont::AgeCacheEntry. Fixed in 12b4.
  • bug 673543 - nsDiskCacheMap::DeleteRecord. Patch waiting review.
  • bug 738661 - crash in nmsvc from CovenantEyes. Trying to repro in a debugger.
  • bug 741179 - crash in nsDiskCacheBlockFile::Write. Met this morning to discuss. Looking at correlations more closely, trying to reproduce.

Third Party

  • bug 743699 Flash crash in 11_2_202_228
    • After we reprocess signatures there will likely be more bugs related to this Flash version filed


Top crashes over last 3 days on 14.0a1 - CrashStats 2012-04-09.png

  • Note: Graph is a capture from 2012/04/09 at 10:34 AM PDT for a 3 day period

The following are crashes that do not have fixes from the Top Crash List

  1. - bug 738198 - dvmAsmInstructionStart - Plugin issue (LANDED TODAY)
  2. - bug 730890 -
  3. - bug 737128 - mozilla::gl::GLContextEGL::ReleaseSurface
  4. - bug 731286 - - Assume we can't do anything here.
  5. - bug 743724 -

Other Socorro work listed in the Mobile Dev Meeting Notes