Weekly browser binaries (20260801)

New build of Serpent/UXP for XP!

Test binary:
Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20260801-3219d2d-uxp-bd1ccc490e-xpmod.7z
Win64 https://o.rthost.win/basilisk/basilisk52-g4.8.win64-git-20260801-3219d2d-uxp-bd1ccc490e-xpmod.7z

source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/custom

IA32 Win32 https://o.rthost.win/basilisk/basilisk52-g4.8.win32-git-20260801-3219d2d-uxp-bd1ccc490e-xpmod-ia32.7z

source code that is comparable to my current working tree is available here: https://github.com/roytam1/UXP/commits/ia32

NM28XP build:
Win32 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20260801-d849524bd-uxp-bd1ccc490e-xpmod.7z
Win32 IA32 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20260801-d849524bd-uxp-bd1ccc490e-xpmod-ia32.7z
Win32 SSE https://o.rthost.win/palemoon/palemoon-28.10.7a1.win32-git-20260801-d849524bd-uxp-bd1ccc490e-xpmod-sse.7z
Win64 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win64-git-20260801-d849524bd-uxp-bd1ccc490e-xpmod.7z
Win7+ x64 AVX2 https://o.rthost.win/palemoon/palemoon-28.10.7a1.win64-git-20260801-d849524bd-uxp-bd1ccc490e-w7plus-avx2.7z

Official UXP changes picked since my last build:
- No Issue - Remove the half-life experiment in HTTP cache (da157b41a3)
- [network] Add usrsctp TSN gap check. (105f231910)
- [layout] Add corner-case correctness check in DottedCornerFinder::FindBestOverlap. (49c7e3445f)
- [DOM] Stop accepting audio samples with too low sample rates. (5faa70e3aa)
- No issue - CallUpdateWindow is [[nodiscard]], but we don't need to use the result here. (dbfe4bd5a6)
- [parser] Associate image elements with form only if the form and the intended parent are in the same tree. (5ac81bf6ff)
- Issue #2404 - Improvements to CSS aspect-ratio spec compliance (3905cc5bd5)
- Issue #2404 - Fix aspect ratio sizing for grid items (8cf6c58858)
- [image] Make sure the image was fully and cleanly decoded before finalizing its animation state as complete. (e252b3856a)
- No issue - Use `strnlen` instead of `strnlen_s`. (5a765da5ca)
- Bug 2029734: Flush before calling sctp_process_init() (44365a9dbc)
- Bug 2049523 - Make ToJSValue for float consistent with double. (db7d9c4c76)
- Issue #2404 - Split aspect ratio enum types into a separate header to fix compilation issues (d6022d3847)
- Bug 2045742 (34cb4816c2)
- [DOM media] Perform more thorough checks on video regions. (06e746865c)
- Issue #3061 Follow-up: Remove network tickler prefs (0f9c761769)
- [layout] Fix nsFrameSetFrame primary frame handling of replicated children. (e5b3bc7cf9)
- [network] Fix CacheEntry::mDoomCallback data race. (9111049721)
- Bug 2027349 - reject empty nickname in PK11_TraverseCertsForNicknameInSlot. (3d7dbc8fb9)
- Bug 2027362 - bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity. (ec58fff3ca)
- Bug 2029901 - Guard against keySize overflow in IKE PRF/PRF+ output sizing. (1ed628fe3a)
- Bug 2027373 - guard space subtraction in ssl_CallCustomExtensionSenders. (97201f8758)
- Bug 2027371 - rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow. (7af0472879)
- Bug 2027346 - validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen. (0bcb0f57ff)
- Bug 2029807 - Guard padding read against empty output in SEC_PKCS7DecryptContents. (4cf35f7b33)
- Issue #3153 - Make sure buttons report a definite size for flex containers. Second try, this time ONLY do it for flex container or grids. This should prevent layout problems in non-flex scenarios. (cd90cc0fd7)
- Bug 2030563 - Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib. (2be3800e92)
- Bug 2027325 - Reject empty nickname in PK11_TraverseCertsForNicknameInSlot. (1a603bfe9e)
- Bug 2030102 - avoid leaving a dangling ss->sec.ci.sid on allocation failure. (5dd26d41f6)
- Bug 2032110 - fix two integer overflows on LLP64 systems. (79a227055a)
- Bug 2027364 - Set tail pointer to null in static slot lists when deallocating. (f167cb61ee)
- Bug 2028954 - CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing. (c4cf8cf6e3)
- Bug 2029433 - Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey. (23dc9da219)
- Bug 2027353 - clamp input.len to testString size in pk11_mergeSecretKey. (4ce8d28c03)
- Bug 2043887 - guard against integer overflow in CERT_Hexify. (73995df3a6)

No official Pale-Moon changes picked since my last build.

No official Basilisk changes picked since my last build.

My changes picked since my last build:
- nss: update certdata and bump ckbi version to 2.90 (e5c222be77)

Update Notice:
- You may delete file named icudt*.dat and icu63.dll inside program folder when updating from old releases.

* Notice: From now on, UXP rev will point to `custom` branch of my UXP repo instead of MCP UXP repo, while "official UXP changes" shows only `tracking` branch changes.

---

New build of BOC/UXP for XP!

Test binary:
MailNews Win32 https://o.rthost.win/boc-uxp/mailnews.win32-20260801-40a79c75-uxp-bd1ccc490e-xpmod.7z
BNavigator Win32 https://o.rthost.win/boc-uxp/bnavigator.win32-20260801-40a79c75-uxp-bd1ccc490e-xpmod.7z

source repo (excluding UXP): https://github.com/roytam1/boc-uxp/tree/custom

* Notice: the profile prefix (i.e. parent folder names) are also changed since 2020-08-15 build, you may rename their names before using new binaries when updating from builds before 2020-08-15.

--

New build of HBL-UXP for XP!

Test binary:
IceDove-UXP(mail) https://o.rthost.win/hbl-uxp/icedove.win32-20260801-id-656ea98-uxp-bd1ccc490e-xpmod.7z
IceApe-UXP(suite) https://o.rthost.win/hbl-uxp/iceape.win32-20260801-id-656ea98-ia-c642e3c-uxp-bd1ccc490e-xpmod.7z

source repo (excluding UXP):
https://github.com/roytam1/icedove-uxp/tree/winbuild
https://github.com/roytam1/iceape-uxp/tree/winbuild

---

New build of post-deprecated Serpent/moebius for XP!
* Notice: This repo will not be built on regular schedule, and changes are experimental as usual.
** Current moebius patch level should be on par with 52.9, but some security patches can not be applied/ported due to source milestone differences between versions.

Test binary:
Win32 https://o.rthost.win/basilisk/basilisk55-win32-git-20260801-6d3683c75-xpmod.7z
Win64 https://o.rthost.win/basilisk/basilisk55-win64-git-20260801-6d3683c75-xpmod.7z

repo: https://github.com/roytam1/basilisk55

Repo changes:
- nss: update certdata and bump ckbi version to 2.90 (355bf04c8)
- ported from UXP: No Issue - Remove the half-life experiment in HTTP cache (da157b41) (bce086a0a)
- import from UXP: [network] Add usrsctp TSN gap check. (105f2319) (728de5fca)
- import from UXP: [layout] Add corner-case correctness check in DottedCornerFinder::FindBestOverlap. (49c7e344) (a3b30ecb4)
- import from UXP: [DOM] Stop accepting audio samples with too low sample rates. (5faa70e3) (fc10655b1)
- ported from UXP: No issue - CallUpdateWindow is [[nodiscard]], but we don't need to use the result here. (dbfe4bd5) (fba643271)
- import from UXP: [parser] Associate image elements with form only if the form and the intended parent are in the same tree. (5ac81bf6) (4b03e6446)
- ported from UXP: Issue #2404 - Improvements to CSS aspect-ratio spec compliance (3905cc5b) (608ee78c0)
- import from UXP: Issue #2404 - Fix aspect ratio sizing for grid items (8cf6c588) (5543f2f7b)
- ported from UXP: [image] Make sure the image was fully and cleanly decoded before finalizing its animation state as complete. (e252b385) (4ff326881)
- import from UXP: No issue - Use `strnlen` instead of `strnlen_s`. (5a765da5) (0316c9693)
- import from UXP: Bug 2029734: Flush before calling sctp_process_init() (44365a9d) (58c4ece42)
- import from UXP: Bug 2049523 - Make ToJSValue for float consistent with double. (db7d9c4c) (6d01a86e0)
- ported from UXP: Issue #2404 - Split aspect ratio enum types into a separate header to fix compilation issuesv (d6022d38) (2483193ab)
- import from UXP: Bug 2045742 (34cb4816) (3a6f3cf12)
- import from UXP: [DOM media] Perform more thorough checks on video regions. (06e74686) (3c8e85ed5)
- import from UXP: Issue #3061 Follow-up: Remove network tickler prefs (0f9c7617) (2b3618cd1)
- import from UXP: [layout] Fix nsFrameSetFrame primary frame handling of replicated children. (e5b3bc7c) (430c8d60d)
- import from UXP: [network] Fix CacheEntry::mDoomCallback data race. (91110497) (9be45a990)
- ported from UXP: Issue #3153 - Make sure buttons report a definite size for flex containers. Second try, this time ONLY do it for flex container or grids. This should prevent layout problems in non-flex scenarios. (cd90cc0f) (5099ec3fe)
- import from UXP:
 - Bug 2027349 - reject empty nickname in PK11_TraverseCertsForNicknameInSlot. (3d7dbc8fb9)
 - Bug 2027362 - bound usageCount in PK11_UnwrapPrivKey to keyTemplate capacity. (ec58fff3ca)
 - Bug 2029901 - Guard against keySize overflow in IKE PRF/PRF+ output sizing. (1ed628fe3a)
 - Bug 2027373 - guard space subtraction in ssl_CallCustomExtensionSenders. (97201f8758)
 - Bug 2027371 - rewrite labelLen bound in tls13_HkdfExpandLabelGeneral to avoid unsigned overflow. (7af0472879)
 - Bug 2027346 - validate encoded EC params length and tag in SECKEY_ECParamsToKeySize/BasePointOrderLen. (0bcb0f57ff)
 - Bug 2029807 - Guard padding read against empty output in SEC_PKCS7DecryptContents. (4cf35f7b33)
 - Bug 2030563 - Validate CKA_CERTIFICATE_TYPE ulValueLen in nss_cert_type_from_ck_attrib. (2be3800e92)
 - Bug 2027325 - Reject empty nickname in PK11_TraverseCertsForNicknameInSlot. (1a603bfe9e)
 - Bug 2030102 - avoid leaving a dangling ss->sec.ci.sid on allocation failure. (5dd26d41f6)
 - Bug 2032110 - fix two integer overflows on LLP64 systems. (79a227055a)
 - Bug 2027364 - Set tail pointer to null in static slot lists when deallocating. (f167cb61ee)
 - Bug 2028954 - CERT_DecodeAVAValue — Integer Overflow in Output Buffer Sizing. (c4cf8cf6e3)
 - Bug 2029433 - Bounds-check wrap index in PK11_GetWrapKey to match PK11_SetWrapKey. (23dc9da219)
 - Bug 2027353 - clamp input.len to testString size in pk11_mergeSecretKey. (4ce8d28c03)
 - Bug 2043887 - guard against integer overflow in CERT_Hexify. (73995df3a6) (6d3683c75)