summaryrefslogtreecommitdiffstats
path: root/security/rlbox
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-21 11:44:51 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-04-21 11:44:51 +0000
commit9e3c08db40b8916968b9f30096c7be3f00ce9647 (patch)
treea68f146d7fa01f0134297619fbe7e33db084e0aa /security/rlbox
parentInitial commit. (diff)
downloadthunderbird-upstream.tar.xz
thunderbird-upstream.zip
Adding upstream version 1:115.7.0.upstream/1%115.7.0upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'security/rlbox')
-rw-r--r--security/rlbox/moz.build100
1 files changed, 100 insertions, 0 deletions
diff --git a/security/rlbox/moz.build b/security/rlbox/moz.build
new file mode 100644
index 0000000000..c8721de19d
--- /dev/null
+++ b/security/rlbox/moz.build
@@ -0,0 +1,100 @@
+# -*- Mode: python; indent-tabs-mode: nil; tab-width: 40 -*-
+# vim: set filetype=python:
+# This Source Code Form is subject to the terms of the Mozilla Public
+# License, v. 2.0. If a copy of the MPL was not distributed with this
+# file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+WASM_SOURCES += [
+ "/memory/mozalloc/mozalloc.cpp",
+ "/third_party/rlbox_wasm2c_sandbox/c_src/wasm2c_sandbox_wrapper.c",
+]
+
+LOCAL_INCLUDES += ["/third_party/wasm2c/wasm2c/"]
+
+EXPORTS += [
+ "/third_party/wasm2c/wasm2c/wasm-rt.h",
+]
+
+SOURCES += [
+ "!rlbox.wasm.c",
+ "/third_party/wasm2c/wasm2c/wasm-rt-impl.c",
+]
+
+# Configuration for the wasm2c runtime used by RLBox
+
+# Use a mmap style allocation
+DEFINES["WASM_RT_USE_MMAP"] = 1
+
+# Don't use internal signal handler as Firefox already provides one
+DEFINES["WASM_RT_SKIP_SIGNAL_RECOVERY"] = 1
+
+# We provide a custom trap handler that calls MOZ_CRASH
+DEFINES["WASM_RT_TRAP_HANDLER"] = "moz_wasm2c_trap_handler"
+
+# Don't limit the nested call depth
+DEFINES["WASM_RT_USE_STACK_DEPTH_COUNT"] = 0
+
+# Configure the wasm runtime to invoke a callback when a Wasm memory growth
+# fails inside the sandbox. This information is used to annotate crash reports.
+DEFINES["WASM_RT_GROW_FAILED_HANDLER"] = "moz_wasm2c_memgrow_failed"
+
+
+FINAL_LIBRARY = "xul"
+
+# Allow compiler warnings both in wasm compiles (because they're third-party
+# libraries), and C compiles (because they're code generated by wasm2c).
+AllowCompilerWarnings()
+
+WASM_DEFINES["MOZILLA_CLIENT"] = True
+WASM_DEFINES["_WASI_EMULATED_PROCESS_CLOCKS"] = True
+WASM_DEFINES["MOZ_IN_WASM_SANDBOX"] = True
+if CONFIG["ENABLE_CLANG_PLUGIN"]:
+ WASM_DEFINES["MOZ_CLANG_PLUGIN"] = True
+
+SANDBOXED_WASM_LIBRARY_NAME = "rlbox.wasm"
+
+if CONFIG["MOZ_WASM_SANDBOXING_HUNSPELL"]:
+ include("/extensions/spellcheck/hunspell/src/sources.mozbuild")
+ WASM_SOURCES += [
+ "/extensions/spellcheck/hunspell/src/" + s for s in hunspell_sources
+ ]
+ LOCAL_INCLUDES += [
+ "/extensions/spellcheck/hunspell/glue",
+ "/extensions/spellcheck/hunspell/src",
+ ]
+
+if CONFIG["MOZ_WASM_SANDBOXING_GRAPHITE"]:
+ include("/gfx/graphite2/src/sources.mozbuild")
+ WASM_SOURCES += ["/gfx/graphite2/src/" + s for s in graphite_sources]
+ WASM_SOURCES += [
+ "/gfx/graphite2/src/call_machine.cpp",
+ ]
+ for k, v in graphite_defines:
+ WASM_DEFINES[k] = v
+ LOCAL_INCLUDES += ["/gfx/graphite2/src"]
+
+if CONFIG["MOZ_WASM_SANDBOXING_OGG"]:
+ include("/media/libogg/sources.mozbuild")
+ WASM_SOURCES += ["/media/libogg/" + s for s in ogg_sources]
+ LOCAL_INCLUDES += ["/media/libogg"]
+
+if CONFIG["MOZ_WASM_SANDBOXING_EXPAT"]:
+ include("/parser/expat/lib/sources.mozbuild")
+ WASM_SOURCES += ["/parser/expat/lib/" + s for s in expat_sources]
+ for k, v in expat_defines:
+ WASM_DEFINES[k] = v
+ LOCAL_INCLUDES += ["/parser/expat/lib/"]
+
+if CONFIG["MOZ_WASM_SANDBOXING_WOFF2"]:
+ include("/modules/woff2/sources.mozbuild")
+ WASM_SOURCES += ["/modules/woff2/" + s for s in woff2_sources]
+ LOCAL_INCLUDES += ["/modules/woff2/include"]
+
+# Ideally we'd also list rlbox.wasm.h as an output, but that would put the
+# generation in export rather than pre-compile, and we prefer the latter.
+GeneratedFile(
+ "rlbox.wasm.c",
+ script="/config/wasm2c.py",
+ entry_point="wasm2c",
+ inputs=["!/dist/host/bin/wasm2c" + CONFIG["HOST_BIN_SUFFIX"], "!rlbox.wasm"],
+)