Platform/2011-08-23

« previous week | index | next week »

Firefox Developer Tools

• Orion editor landed for use in Scratchpad (and future tools), disabled on Aurora.
• Enabled on mozilla-central to get feedback on issues raised in the dev-apps-firefox thread.
• Weekly meetings have been moved to Thursdays at 10am.

Layout

• Mats Palmgren has a patch about to land that changes the way we iterate through frame child lists to a more efficient and maintainable approach. This may cause some bit-rot in pending layout patches.
• Mats landed support for text-overflow:<left> <right> (different markers for the left and right sides of an overflowing block).
• Josh Aas has a patch to move ownership of plugins from frames to content to fix bugs like "display:none plugins don't work". This is getting close to done. We'll need to monitor its progress carefully because it's a scary, regression-prone area. The good news is that another >10 year old architectural botch is going away!
• New Auckland office rocks!
• Zzzz

Video

• Paul Adenot (intern) implemented "played" and "seekable" media element attributes.

Network

• [Patrick McManus] SPDY implementation is progressing nicely.
• [Nick Hurley] Continuing to expand NeckoNet capabilities. New version coming soon (with a ready-to-use Linux VM) which will allow testing from Linux, Windows, and Mac OS X.

Mobile

• Everyone should read "Android/ARM Firefox Performance: where we are and where to go"
  • A todo list of things to improve on Android

Tree Management

• Update on Tinderbox mail delay
  • Maximum delay we are seeing has been cut in half (~8 hours -> ~4h), and spans a shorter period of time.
  • IT improved performance on the Tinderbox server in bug 676822 - no longer I/O bound
  • Turning off mail for the Try branch cut down load by a lot. bug 679589
  • New TBPL is still in the process of being put into production, now taken over by Web Dev bug 669000, no ETA at this time.
• Network issues last week caused a bunch of Windows machines to get into a hung state, causing long wait times for some jobs.
  • Now fixed, wait times back to normal.
  • Improved monitoring tracked in bug 681111

Security

Reviews this week

Wed:

• Wed. 24-Aug, 1:00 PM PDT
• 3O - ORLY

SourceMap - https://wiki.mozilla.org/DevTools/Features/SourceMap

Thur:

• Thur. 25-Aug, 15:00 PDT
• 3P - PB&J

Intern Project for DNSSec

Fri:

• Fri. 26-Aug 1:00 PM PDT
• 3P - PBJ

SecReview: (double review) Web Activities & F1/Share

1. ) Web Activities
   1. component of the broader Open Web Applications project
   2. https://github.com/mozilla/openwebapps/blob/master/docs/ACTIVITIES.md
2. ) F1 retooled version of the link sharing service we looked at in May (https://wiki.mozilla.org/Security/Reviews/F1)
   1. https://wiki.mozilla.org/Labs/F1
   2. https://wiki.mozilla.org/Labs/F1/Roadmap
   3. https://wiki.mozilla.org/Services/F1/Design
   4. https://wiki.mozilla.org/Privacy/Reviews/F1

Common Meeting Information

---

Agenda:

• Introduce Feature (5-10 minutes) [can be answered ahead of time to save meeting time]
  • Goal of Feature, what is trying to be achieved (problem solved, use cases, etc)
  • What solutions/approaches were considered other than the proposed solution?
  • Why was this solution chosen?
  • Any security threats already considered in the design and why?
• Threat Brainstorming (30-40 minutes)
• Conclusions / Action Items (10-20 minutes)

Meeting Details:

• IRC Channel: #security
• Etherpad: http://etherpad.mozilla.com:9000/secreview
• Dial-in Info:
  • In office or soft phone: extension 92
  • US/INTL: 650-903-0800 or 650-215-1282 then extension 92
  • Toronto: 416-848-3114 then extension 92
  • Toll-free: 800-707-2533 then password 369
  • Conference num 624

Stability Report

Desktop

Trunk 9.0a1

• Bug 680862 was a rather high volume regression yesterday and was fixed by backout. Comment 28 in the bug indicates it was visible in tests, but because the color was purple instead of red it was ignored.
• Bug 681385 - Plugin Trunk regression that started with 20110817 build.

Aurora & Beta

• https://bugzilla.mozilla.org/show_bug.cgi?id=680954 Bug 680954] - Mac only, happens across all versions

Malware/Extension Related

• Bug 681378 - Yandex Bar
• Bug 681378 - security.dll
• Bug 680274 - Spike in Both 5 and 6 and correlated to Norton

Other

A few other things we are tracking...

• http://test.kairo.at/socorro/2011-08-22.firefox.7.0.flashhangdetails.html - Data for 7.0 on Flash issues.
• https://bugzilla.mozilla.org/show_bug.cgi?id=681147 - Investigate high number of crash signatures that have javascript: urls
• Looking at options (if any) for getting plugin URL correlations.