1.0.5

Discussion about official Mozilla Firefox builds
Post Reply
User avatar
joeg
Posts: 2616
Joined: October 10th, 2003, 12:37 pm
Location: How can you be in two places at once, when you're not anywhere at all?

Difference between builds?

Post by joeg »

colfer wrote:Bonsai checkins for 1.0.5 were slow for a while, but since yesterday they have accelerated. So maybe release candidates will be out soon? You could try some of the "aviary-1.0.1" builds here:
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/
Those builds will become 1.0.5.

Is there any difference between the builds in that folder and these:
http://mozilla.osuosl.org/pub/mozilla.o ... iary1.0.1/
Although every day is Judgment Day, I nonetheless feel like a room without a roof.
User avatar
colfer
Posts: 643
Joined: December 4th, 2002, 9:34 am
Location: Bear

Post by colfer »

1.0.5 is mainly a security fix, but I have seen a bunch of non-security fixes creep in also, such as removing the default checkbox "yes" for "make firefox my home page." This looks like a big cleanup for the 1.0.x branch, before 1.1 takes over.

I don't know about the security fixes, besides the medium-risk frame/window spoofing thing (with 1.0.4, you should not open untrusted sites at the same time as sensitive sites...). Here are the non-security fixes (non-security as it seems to me) checked in since 1.0.4:

https://bugzilla.mozilla.org/show_bug.cgi?id=283730
"Save As" dialog tries to overwrite link/shortcut (.lnk) file instead of opening the directory/folder

https://bugzilla.mozilla.org/show_bug.cgi?id=295210
Tab title different from window title on initial load at gmail

https://bugzilla.mozilla.org/show_bug.cgi?id=283777
Right arrow key after selecting autocomplete result no longer uses selected item

https://bugzilla.mozilla.org/show_bug.cgi?id=291232
update installer packages should offer unchecked check box for setting start page

https://bugzilla.mozilla.org/show_bug.cgi?id=291064
Helper app dialog incomplete for non-nsStandardURL types

https://bugzilla.mozilla.org/show_bug.cgi?id=265536
(64-bit only issue)

https://bugzilla.mozilla.org/show_bug.cgi?id=245631
Crash loading (particular) .ico file

https://bugzilla.mozilla.org/show_bug.cgi?id=141818
Table with large rowspans and colspans hangs the browser

https://bugzilla.mozilla.org/show_bug.cgi?id=288006
Drag image across browser windows --> crash

https://bugzilla.mozilla.org/show_bug.cgi?id=295052
Obscure Javascript crash

https://bugzilla.mozilla.org/show_bug.cgi?id=296270
Default user agent problem (AIX platform only)

https://bugzilla.mozilla.org/show_bug.cgi?id=280813
Crash on OS/2 platform

https://bugzilla.mozilla.org/show_bug.cgi?id=293778
bookmarks toolbar missing in 2nd opened window, links in second window possibly cause crash
User avatar
joeg
Posts: 2616
Joined: October 10th, 2003, 12:37 pm
Location: How can you be in two places at once, when you're not anywhere at all?

But is it the same build?

Post by joeg »

colfer wrote:1.0.5 is mainly a security fix, etc.
Thanks, but I'm still wondering if it's the same build as in the folder I indicated.
Although every day is Judgment Day, I nonetheless feel like a room without a roof.
User avatar
colfer
Posts: 643
Joined: December 4th, 2002, 9:34 am
Location: Bear

Re: But is it the same build?

Post by colfer »

JoeG wrote:
colfer wrote:1.0.5 is mainly a security fix, etc.
Thanks, but I'm still wondering if it's the same build as in the folder I indicated.

Yeah, that was an overlapping post. I don't know the answer to your question.
User avatar
MaydayFox
Posts: 189
Joined: June 10th, 2005, 11:20 pm
Location: California

Post by MaydayFox »

Mini-Geek wrote:I don't think so, 1.0.5 will probably be out within a week, I don't think Deer Park will be affected more than a week or two at most, if at all

And 2 week past and 1.0.5 still didnt came. Why? Is there any problem?
michaell522
Posts: 2417
Joined: November 4th, 2002, 4:47 pm
Location: London, UK
Contact:

Re: Difference between builds?

Post by michaell522 »

JoeG wrote:
colfer wrote:Bonsai checkins for 1.0.5 were slow for a while, but since yesterday they have accelerated. So maybe release candidates will be out soon? You could try some of the "aviary-1.0.1" builds here:
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/nightly/
Those builds will become 1.0.5.

Is there any difference between the builds in that folder and these:
http://mozilla.osuosl.org/pub/mozilla.o ... iary1.0.1/

colfer's link goes to the nightlies folder - the "aviary-1.0.1" builds under there that he mentioned are the same type of builds as the one at your link. The tinderbox-builds are uploaded every few hours, and then once each day one of them goes into the "nightly" folder, but they're from the same branch of code.

MaydayFox wrote:And 2 week past and 1.0.5 still didnt came. Why? Is there any problem?

I don't think so - the 2 week time wasn't something that anyone from Mozilla said. According to the meeting minutes, there was a meeting to triage 1.0.5 issues last Tuesday and I imagine they're still getting the fixes together, then they'll need to do some testing, then they will release. Because the security issues aren't quite so bad as in previous cases, I guess they will want to try and bit more thorough with 1.0.5, so they don't need a 1.0.6 a couple of weeks later.

colfer wrote:Here are the non-security fixes (non-security as it seems to me)

Depends what you call "non-security" fixes - several of them are fixes for problems that meant a webpage could crash Firefox - that's a "denial of service" security issue. A couple of them (e.g. the lnk thing) are fixes for regressions caused by previous security fixes on the branch, and a couple of the ones which aren't either of those are platform specific fixes which don't effect the official builds.
User avatar
colfer
Posts: 643
Joined: December 4th, 2002, 9:34 am
Location: Bear

Post by colfer »

More tantalizing info. These are the four open bugs "blocking-aviary1.0.5+" (Boolean Charts on Bugzilla advanced search)
[url=https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&cmdtype=doit&field0-0-0=flagtypes.name&type0-0-0=equals&value0-0-0=blocking-aviary1.0.5%2B&resolution=---]
Bugzilla (blocking-aviary1.0.5+)[/url]

It comes down to two things. First, a pair of related bugs, AFAIK about an issue breaking some extensions in the new more secure Javascript model. Second, a pair of bugs just to bump the version number to 1.0.5.

That's it, unless it changes. :)
User avatar
colfer
Posts: 643
Joined: December 4th, 2002, 9:34 am
Location: Bear

Post by colfer »

Oh, and there are also 3 bugs nominated to block 1.0.5.
[url=https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&cmdtype=doit&field0-0-0=flagtypes.name&type0-0-0=equals&value0-0-0=blocking-aviary1.0.5%3F&resolution=---]
Bugzilla (blocking-aviary1.0.5?)[/url]

https://bugzilla.mozilla.org/show_bug.cgi?id=289864
Page crashes system (blue screen) with oversized image (Windows only, IE too)

https://bugzilla.mozilla.org/show_bug.cgi?id=292101
Not Firefox. Thunderbird dataloss, re-opened.

https://bugzilla.mozilla.org/show_bug.cgi?id=291278
Form elements (especially text-fields) are very slow
parsec
Posts: 180
Joined: October 22nd, 2003, 7:05 am
Location: USA alas

Post by parsec »

There is a 1.0.5 version at
ftp://ftp.mozilla.org/pub/mozilla.org/f ... iary1.0.1/
It installs as
Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.8)Gecko/20050620 Firefox/1.0.5
No alpha, beta or RC - any comments?
old Neil Parks
Moderator
Posts: 0
Joined: December 31st, 1969, 5:00 pm

Post by old Neil Parks »

parsec wrote:There is a 1.0.5 version at
ftp://ftp.mozilla.org/pub/mozilla.org/f ... iary1.0.1/
Latest I found there was a version of 1.0.4.

But here's where the 1.0.5 is hiding:

http://ftp.mozilla.org/pub/mozilla.org/ ... iary1.0.1/

Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.7.9) Gecko/20050620 Firefox/1.0.5 (ax)
simulate030
Posts: 235
Joined: January 19th, 2004, 3:30 pm

Post by simulate030 »

Is 1.0.5 a continuation of Deer Park or are they totally different projects? And if not, which should I use: 1.0.5 or DP? (I'm using DP over 1.0.4 right now)
User avatar
BenBasson
Moderator
Posts: 13671
Joined: February 13th, 2004, 5:49 am
Location: London, UK
Contact:

Post by BenBasson »

simulate030 wrote:Is 1.0.5 a continuation of Deer Park or are they totally different projects? And if not, which should I use: 1.0.5 or DP? (I'm using DP over 1.0.4 right now)

They're totally different. 1.0.5 is an update for 1.0.4. Deer Park is destined to become 1.1. My advice would be to upgrade to Deer Park Alpha 2 when it comes out, or grab a recent nightly build.
michaell522
Posts: 2417
Joined: November 4th, 2002, 4:47 pm
Location: London, UK
Contact:

Post by michaell522 »

Neil Parks wrote:But here's where the 1.0.5 is hiding

Not so hidden now - Asa's blog points to an announcement on a new QA blog - http://weblogs.mozillazine.org/qa/
User avatar
minipouss
Posts: 151
Joined: December 10th, 2003, 6:47 am
Location: Orleans, France

Post by minipouss »

I hope 1.0.5 will have a fix for this vulnerability announced today by Secunia and which you can test here : http://secunia.com/multiple_browsers_di ... lity_test/ :)
sboulema
Posts: 6615
Joined: May 20th, 2003, 12:34 am
Location: Amstelveen, The Netherlands

Post by sboulema »

tested on the tested builds from here: http://weblogs.mozillazine.org/qa/archi ... 5_tes.html

and they are vulnerable...
Post Reply