package/libnss: bump version to 3.127

Rework local patch

For release note, see:
8c4f491f67/doc/src/releases/nss_3_127.md

NOTE: libnss version 3.127 requires libnspr version 4.39.

Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Julien: fix libnspr version typo in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Giulio Benetti
2026-08-17 23:42:51 +02:00
committed by Julien Olivain
parent 4221e786e0
commit 323f7e8492
3 changed files with 9 additions and 7 deletions

View File

@@ -1,4 +1,4 @@
From 974469740e6fa9b7ad15f6d9b3945370dc11fa1e Mon Sep 17 00:00:00 2001
From 897ebeb9c38d4dc4844f5f414db5aaa17c261eee Mon Sep 17 00:00:00 2001
From: Giulio Benetti <giulio.benetti@benettiengineering.com>
Date: Mon, 30 Mar 2026 17:06:14 +0200
Subject: [PATCH] Bug 2027768 - Fix build failure due to missing gcm stubs if
@@ -16,6 +16,7 @@ DHAVE_PLATFORM_GHASH definition depending on LITTLE_ENDIAN VARIABLE.
Upstream: https://bugzilla.mozilla.org/show_bug.cgi?id=2027768
Signed-off-by: Giulio Benetti <giulio.benetti@benettiengineering.com>
[Giulio: rebased to version 3.127]
---
nss/coreconf/Linux.mk | 8 ++++++++
nss/lib/freebl/Makefile | 28 ++++++++++++++++++++++------
@@ -41,7 +42,7 @@ index dcb432415f..cf1f62378d 100644
ZLIB_LIBS = -lz
diff --git a/lib/freebl/Makefile b/lib/freebl/Makefile
index 4ee9d61f50..39ef28ec8c 100644
index 0ab50b093a..21c3cf62d8 100644
--- a/nss/lib/freebl/Makefile
+++ b/nss/lib/freebl/Makefile
@@ -112,7 +112,10 @@ endif
@@ -68,7 +69,7 @@ index 4ee9d61f50..39ef28ec8c 100644
EXTRA_SRCS += aes-armv8.c ghash-aarch64.c sha1-armv8.c sha256-armv8.c
else ifeq (1,$(CC_IS_GCC))
# GCC versions older than 4.9 don't support ARM AES. The check
@@ -146,18 +152,26 @@ ifeq ($(CPU_ARCH),aarch64)
@@ -146,11 +152,17 @@ ifeq ($(CPU_ARCH),aarch64)
# and then rejects any major versions prior to 5. Note that
# there has been no GCC 4.10, as it was renamed to GCC 5.
ifneq (,$(filter 4.9,$(word 1,$(GCC_VERSION)).$(word 2,$(GCC_VERSION))))
@@ -88,6 +89,7 @@ index 4ee9d61f50..39ef28ec8c 100644
EXTRA_SRCS += aes-armv8.c ghash-aarch64.c sha1-armv8.c sha256-armv8.c
endif
endif
@@ -183,7 +195,9 @@ ifeq ($(CPU_ARCH),aarch64)
endif
ifeq ($(CPU_ARCH),arm)
ifndef NSS_DISABLE_ARM32_NEON
@@ -98,7 +100,7 @@ index 4ee9d61f50..39ef28ec8c 100644
EXTRA_SRCS += ghash-arm32-neon.c
endif
ifdef CC_IS_CLANG
@@ -290,7 +304,9 @@ ifeq ($(CPU_ARCH),arm)
@@ -316,7 +330,9 @@ ifeq ($(CPU_ARCH),arm)
MPI_SRCS += mpi_arm.c
endif
ifeq ($(CPU_ARCH),ppc)

View File

@@ -1,4 +1,4 @@
# From https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_125_RTM/src/SHA256SUMS
sha256 1ad541f10da7c58dec01f540ecc44d28cbbc033f741a57473de5a0893d91606d nss-3.125.tar.gz
# From https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_127_RTM/src/SHA256SUMS
sha256 5a899cad21ae2c9d3c5132de79726eda8df3b7fdf18eeb239fc544d43b87338b nss-3.127.tar.gz
# Locally calculated
sha256 a20c1a32d1f8102432360b42e932869f7c11c7cdbacf9cac554c422132af47f4 nss/COPYING

View File

@@ -4,7 +4,7 @@
#
################################################################################
LIBNSS_VERSION = 3.125
LIBNSS_VERSION = 3.127
LIBNSS_SOURCE = nss-$(LIBNSS_VERSION).tar.gz
LIBNSS_SITE = https://ftp.mozilla.org/pub/mozilla.org/security/nss/releases/NSS_$(subst .,_,$(LIBNSS_VERSION))_RTM/src
LIBNSS_DISTDIR = dist