Meeting Notes

10-April-2012

Mozilla Platform Meeting Minutes: 2012-04-10

Filed under: Posts — Tags: — Jesper Kristensen @ 11:00 pm

Platform/2012-04-10

« previous week | index | next week »

Platform Meeting Details

  • Tuesdays – 11:00 am Pacific

  • Dial-in: conference# 95312
    • US/International: +1 650 903 0800 x92 Conf# 95312

    • US toll free: +1 800 707 2533 (pin 369) Conf# 95312
    • Canada: +1 416 848 3114 x92 Conf# 95312
  • Warp Core Vidyo Room
  • join irc.mozilla.org #planning for back channel

Contents

Kilimanjaro

Notices / Schedule

  • If you have no more blockers for FF12 and the next ESR (released 4/24), please start digging into bugs tracked for FF13

Firefox Development

  • Jared Wein landed initial support for click to play plugins on desktop (bug 711552)

    • Followup work in bug 711618 to improve permissions model

Firefox Developer Tools

Add-on SDK

  • There were delays getting AMO updated with the 1.6 SDK last week so some developers may have seen warnings when uploading their add-ons

  • Spinning a 1.6.1 release to fix a minor leak

Performance

  • This week’s Snappy summary

  • Ehsan discovered some really bad performance issues for animated skins or those that heavily use svg and css
    • Will look at moving image decoding off of the main thread
  • Vlad worked on cancellable sql (bug 722243), have to figure out if the benefit from cancellable queries justifies additional locking
  • Vlad is analyzing a batch of slow startup data from March
  • Anthony and QA team are chrome leak testing looking for leaked documents that should be cycle collected
  • Tim put up AreWeSmallYet, tracking changes in build size: http://arewesmallyet.com/
  • Bill disabled incremental GC due to leaks bug 641025
  • mccra8 removed more stuff from the CC graph (bug 740185)

GFX

  • Continue to be focused on mobile Firefox.

    • We fixed most of Firefox on Android’s extreme crashiness, with the notable exception of on David Baron’s phone, who alone accounts for 13% of our crashes (221 unique crash IDs) in the past week, the #1 topcrasher by a large margin.

    • We’re focused on performance and checkerboardiness now, with our major work being tracked as Fennec beta blockers.

JS

Layout

  • Focused on mobile Firefox.

    • Readability.

    • Scrolling/Zoom bugs.

Video

  • MediaStreams near landing on m-c

  • Initial WebRTC landings being planned (preffed off).

DOM

  • No updates today.

WebAPI

Network

Identity

Plugins

Mobile

Accessibility

Tree Management

  • hg.m.o downtime Thursday April 12 6-9am PDT for migration to new datacentre

  • Switching OSX build machines today hopefully – nightly updates will be diverted until testing is completed
  • tree status app in staging for poking: https://treestatus-dev.allizom.org/
  • infrastructure load for march
    • 4,508 pushes in March – peaking at 238 checkins per day

    • 5th month in a row of record activity

Security

Date / Time Item
Mon Apr 9 / 13:00 PST BrowserID Sync
Wed Apr 11 / 13:00 PST AVAILABLE
Thu Apr 12 / 10:00 PST AVAILABLE
Fri Apr 13 / 10:00 AM PST AVAILABLE

Calendar and Meeting details

General Meeting Details 
* IRC Channel: #security 
* Etherpad: http://etherpad.mozilla.com:9000/secreview 
* Vidyo: https://v.mozilla.com/flex.html?roomdirect.html&key=5XEMsG1ApA4b (Room 9058)
* Dial-in Info (phone): 
** In office or soft phone: extension 92 
** US/INTL: 650-903-0800 or 650-215-1282 then extension 92 
** Toronto: 416-848-3114 then extension 92 
** Toll-free: 800-707-2533 then password 369 
** Conference num 99058

For updates to meetings please see the Security Review Calendar

Security Review Needed but Unscheduled

Review Needed

  • Feature pages triaged to need review, review unscheduled
Feature Feature List Target Rel Prod Mgr Lead Engr Security lead Security status Security notes Last Modified
Client-side XPI construction Jetpack Add-on Builder 2 Daniel Buchner Piotr Zalewa/Sean McArthur ` sec-review-needed ` 2011-07-13T22:16:04
Add-On Tab API ` Add-on SDK 1.5 David Mason ` Dan Veditz sec-review-needed ` 2012-01-11T22:10:27
B2G App Security Model ` B2G 1.0 Lucas Adamski Jonas Sicking, Chris Jones Paul Theriault sec-review-needed sched with curtis 2012-03-29T22:15:25
Migrate Chrome settings and data Desktop Firefox 11 Asa Dotzler Makoto Kato, Marco Bonardo ` sec-review-needed ` 2012-03-13T14:03:25
Style Editor Desktop Firefox 11 Kevin Dangoor Cedric Vivier ` sec-review-needed ` 2012-03-27T18:16:36
Hang Detector and Reporter Desktop Firefox 13 Asa Dotzler Vladan Djeric ` sec-review-needed please sched with curtisk 2012-03-15T00:50:19
Easy UI Feature Testing and “Success Evaluation” (integrate TestPilot like features) ` Firefox 13 ` ` ` sec-review-needed Please schedule with curtisk 2012-03-02T23:41:56
Windows 8 Metro Firefox Desktop Firefox 14 Asa Dotzler ` ` sec-review-needed sched with curtisk 2012-04-10T20:50:47
Speedy Session Restore Desktop Firefox 14 Asa Dotzler Dietrich Ayala ` sec-review-needed schedule with curtsk 2012-04-10T11:24:22
In-content preferences Desktop Firefox 15 Jared Wein Devan Sayles ` sec-review-needed when ready sched w/ curtisk 2012-01-25T22:43:11
DOMCryptAPI (a Crypto API in the DOM) Platform Firefox 15? Chris Blizzard David Dahl Brian Smith sec-review-needed ` 2012-02-07T03:07:24
Better rendering of fonts for Windows Platform Firefox 7 Chris Blizzard ` ` sec-review-needed small team review Christoph, bsterne, John Daggett 2011-10-13T00:23:00
FlightDeck as a Client-side App Jetpack FlightDeck 1.0 Daniel Buchner Sean McArthur ` sec-review-needed when ready sched w/ curtisk 2012-01-25T22:43:38
IndexedDB Support for Multi-Process Firefox Platform Future, distant future. Chris Blizzard ` ` sec-review-needed 2011.10.17: sid recommends we wait on this one but likely needs a review. 2011-11-10T19:14:59
Sharing textures cross-process for Electrolysis Platform Q4 of 2011. Chris Blizzard Chris Jones ` sec-review-needed ` 2011-10-13T16:52:42
SDK Support for Firefox for Mobile Addons Jetpack SDK 1.5 David Mason Matteo Ferretti ` sec-review-needed ` 2012-04-06T16:32:53
Sign into the browser Other TBD Dan Mills Ben Adida ` sec-review-needed when ready sched w/ curtisk 2012-04-03T21:25:10
Tip of the day Thunderbird Thunderbird 11 Jean-Baptiste Piacentino Sancus ` sec-review-needed ` 2012-03-08T16:54:08
Modern MIME Parser Thunderbird Thunderbird 14? ` Joshua Cranmer ` sec-review-needed sched with curtisk 2012-03-02T23:51:32
Modern Address Book – V1 Thunderbird Under revision ` Mike Conley ` sec-review-needed ` 2012-01-12T19:38:14
Enhancements to help mitigate search hijacking Desktop ` Asa Dotzler Gavin Sharp Al Billings sec-review-needed ` 2012-04-10T18:15:21
Blocklist UX enhancements [Plug-ins] Desktop ` Kev Needham ` ` sec-review-needed ` 2012-01-30T05:35:09
Use PFS2 as Plugin Finder data source Desktop ` Kev Needham ` ` sec-review-needed ` 2011-11-10T10:54:09
Add plugincheck functionality to Add-on Manager Desktop ` Kev Needham ` ` sec-review-needed ` 2011-10-24T21:28:12

Bugs marked sec-review-needed that need to be scheduled

ID Summary Status Priority
738698 [meta] Users should have the ability to activate plugins on demand NEW
549697 Add click-to-start form of disabled plugins (Add-on manager) NEW
716107 Better key input support in DOM full-screen mode – requestFullScreenWithKeys API NEW
733414 SecReview for SocialAPI NEW
649154 Implement DOMCrypt (Internal) API NEW
717103 MediaStorage API NEW
585958 webapps OS level integration : Maemo NEW
674718 WebUSB NEW
707625 [WebAPI] Proper WebAPI permissions manager NEW
567365 Cache-Control no-cache on https page disables history NEW
664636 Thunderbird should (semi-)automatically improve the security-related server configuration settings when it knows an improvement could be made NEW
664637 Thunderbird auto-configuration database should be expanded & updated by regularly spidering every domain on the internet NEW
674047 Teach FileSaver to take URIs as well NEW
674701 “App-state” API, so that content knows when it becomes hidden etc. NEW
674737 WebBluetooth NEW
677302 Preffing out CSS should be easier NEW
680617 WebPrint (or WebIPP) NEW
681009 API for “home screen” app locking display, listening for “wake up” button, etc. NEW
692677 Relax same-origin XHR restrictions for privileged applications NEW
693515 Browser API NEW
697355 Network manager API NEW
722126 Can’t transfer File objects with postMessage cross domain NEW
729320 IndexedDB: Provide some amount of storage without a prompt NEW
697361 Sensor API NEW
735075 Sec Review: Distributed Events platform ASSIGNED
711618 implement click to play permission model ASSIGNED
80713 Need a way to specify an auto-height (size) for an IFRAME such that the frame is given the full height of the contained content (moz-seamless, part of seamless iframes) ASSIGNED
674720 WebContacts (or Contacts+) RESOLVED
674726 WebTelephony RESOLVED
728341 Security Review for Beta Release of App RESOLVED
706545 Implement a sync engine for apps exposed by navigator.mozApps RESOLVED
697132 Create API for content to keep the screensaver from turning on (or to prevent phone/tablet’s screen from turning off) RESOLVED

Stability Report

Socorro

  • Due to a file name pattern change by Adobe, the version of current Flash releases isn’t detected by Socorro (bug 742735). This also makes KaiRo’s Flash crash/hang reports not list those 11.2.* versions – a fix is ready for landing and should be deployed in tomorrow’s Socorro release.

Desktop

Trunk

  • bug 741715 crash in XPCWrappedNativeProto::TraceJS

  • bug 743767 Firefox crash @ memcpy | GlyphBufferAzure::Flush

Release

  • bug 744043 Firefox crash [@ gfxASurface::GetType()

Beta

  • bug 717175 – gfxFont::AgeCacheEntry. Fixed in 12b4.

  • bug 673543 – nsDiskCacheMap::DeleteRecord. Patch waiting review.
  • bug 738661 – crash in nmsvc from CovenantEyes. Trying to repro in a debugger.
  • bug 741179 – crash in nsDiskCacheBlockFile::Write. Met this morning to discuss. Looking at correlations more closely, trying to reproduce.

Third Party

  • bug 743699 Flash crash in 11_2_202_228

    • After we reprocess signatures there will likely be more bugs related to this Flash version filed

Mobile

Top crashes over last 3 days on 14.0a1 – https://crash-stats.mozilla.com/topcrasher/byversion/FennecAndroid/14.0a1/3/browser

  • Note: Graph is a capture from 2012/04/09 at 10:34 AM PDT for a 3 day period

The following are crashes that do not have fixes from the Top Crash List

  1. bug 738198 – dvmAsmInstructionStart – Plugin issue (LANDED TODAY)

  2. bug 730890 – libdvm.so@0x50e96
  3. bug 737128 – mozilla::gl::GLContextEGL::ReleaseSurface
  4. bug 731286 – libflashplayer.so@0x157bbe – Assume we can’t do anything here.
  5. bug 743724 – libEGL_mali.so@0xdae4

Other Socorro work listed in the Mobile Dev Meeting Notes

Roundtable

No Comments

No comments yet.

RSS feed for comments on this post.

Sorry, the comment form is closed at this time.

Powered by WordPress