firefox: update to 59.0.2

CVE-2018-5148: Use-after-free in compositor

Invalid page rendering with hardware acceleration enabled (Bug 1435472)

Windows 7 users with touch screens or certain 3rd party desktop applications which interact with Firefox through accessibility services may experience random browser crashes. Known 3rd party applicatioins with issues: StickyPassword, Windows 7 touch screen. (Bug 1424505)

Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites that use those keys with resistFingerprinting enabled (Bug 1433592)

High CPU / memory churn caused by third-party software on some computers (Bug 1446280)

Users who have configured an "automatic proxy configuration URL" and want to reload their proxy settings from the URL will find the Reload button disabled in the Connection Settings dialog when they select Preferences/Options > Network Proxy > Settings... (Bug 1445991)

URL Fragment Identifiers Break Service Worker Responses (Bug 1443850)

User's trying to cancel a print around the time it completes will continue to get intermittent crashes (Bug 1441598)

Broken getUserMedia (audio) on DragonFly, FreeBSD, NetBSD, OpenBSD. Video chat apps either wouldn't work or be always muted (Bug 1444074)

3 files changed, 19 insertions, 33 deletions

diff --git a/www/firefox/Makefile b/www/firefox/Makefile
index 03c11a24a9e..8f530104c35 100644
--- a/www/firefox/Makefile
+++ b/www/firefox/Makefile
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.324 2018/03/17 00:59:02 ryoon Exp $
+# $NetBSD: Makefile,v 1.325 2018/03/26 22:24:45 maya Exp $
 
-FIREFOX_HGREV=		3db9e3d52b17563efca181ccbb50deb8660c59ae
-FIREFOX_VER=		59.0.1
+FIREFOX_HGREV=		239e434d6d2b8e1e2b697c3416d1e96d48fe98e5
+FIREFOX_VER=		59.0.2
 
 DISTNAME=	firefox-${FIREFOX_VER}
 CATEGORIES=	www
diff --git a/www/firefox/distinfo b/www/firefox/distinfo
index ec331f04099..ad4d3e53b4a 100644
--- a/www/firefox/distinfo
+++ b/www/firefox/distinfo
@@ -1,9 +1,9 @@
-$NetBSD: distinfo,v 1.309 2018/03/17 00:59:02 ryoon Exp $
+$NetBSD: distinfo,v 1.310 2018/03/26 22:24:45 maya Exp $
 
-SHA1 (firefox-59.0.1.tar.bz2) = cdaf28a784fa14cf4bc3e7e111406a9fcf273cc5
-RMD160 (firefox-59.0.1.tar.bz2) = 64f4696e2206cec4fbd5610c2138a3c7d89fd21f
-SHA512 (firefox-59.0.1.tar.bz2) = 5c1a5e19db6c08091d2c50b5763a7f0542d9d28bf5fc5d293f29b74764df38f4963d3eb96f3b7ecca2e980000e3e52ba2daf442bcd4ae87a69aa94d8aebea1da
-Size (firefox-59.0.1.tar.bz2) = 304965726 bytes
+SHA1 (firefox-59.0.2.tar.bz2) = 8fcf726b4d23716c7ff2b7ebc6527782b5bafe9c
+RMD160 (firefox-59.0.2.tar.bz2) = ff7ab2f9da93eda98de8aecb4563cfd176b896d9
+SHA512 (firefox-59.0.2.tar.bz2) = db8f55954df3af554e7a614eaece4aed995794dac6e2d828b2f9c175d8a6b89e109c26ced41a43df9ad24e01d079cadf13d16c6a9bdd1887bc9898d34408e8e6
+Size (firefox-59.0.2.tar.bz2) = 304965099 bytes
 SHA1 (patch-aa) = aca3d55271df926da793d7a0543f522d42e67f9d
 SHA1 (patch-build_gyp.mozbuild) = 77e0954a796337b24572674cd1d14d4a5cab8e6e
 SHA1 (patch-build_moz.configure_init.configure) = 5ec8da6b5aad7682a88b010a99e19f5d4403e6db
@@ -63,7 +63,7 @@ SHA1 (patch-media_webrtc_trunk_webrtc_modules_audio__device_linux_audio__device_
 SHA1 (patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_device__info__linux.cc) = 0141dd1372c13ea1fce6e2f5ffb65e0cb0f3a13e
 SHA1 (patch-media_webrtc_trunk_webrtc_modules_video__capture_linux_video__capture__linux.cc) = a69bc7b7096b410582e725f9dbec57fee90d6686
 SHA1 (patch-media_webrtc_trunk_webrtc_modules_video__capture_video__capture.gypi) = 772a858fb74d404a6b86e5634bc3eec586a1b06a
-SHA1 (patch-modules_libpref_init_all.js) = aaf450596244fb25136e428589d81a008cf1e54c
+SHA1 (patch-modules_libpref_init_all.js) = 4c265ca5d45943fcfb7e75b0f0e5b918643bcd6c
 SHA1 (patch-modules_pdfium_update.sh) = b0bf091325c9322c54880de067871354cd689038
 SHA1 (patch-mozglue_build_arm.cpp) = f41ace63b3f1d2a8ccaffc98c3c64d1e22af5249
 SHA1 (patch-mozglue_build_arm.h) = 5e272f4e19b9681d43a63c45d78b0e44a392c7dc
diff --git a/www/firefox/patches/patch-modules_libpref_init_all.js b/www/firefox/patches/patch-modules_libpref_init_all.js
index 17f1c11bb2f..0237edb6f04 100644
--- a/www/firefox/patches/patch-modules_libpref_init_all.js
+++ b/www/firefox/patches/patch-modules_libpref_init_all.js
@@ -1,36 +1,22 @@
-$NetBSD: patch-modules_libpref_init_all.js,v 1.7 2018/03/17 00:59:03 ryoon Exp $
+$NetBSD: patch-modules_libpref_init_all.js,v 1.8 2018/03/26 22:24:45 maya Exp $
+
+Else case same as linux for duplex audio, capture_delay, and disabling
+custom styling to workaround a GTK bug
 
 --- modules/libpref/init/all.js.orig	2018-03-10 02:54:17.000000000 +0000
 +++ modules/libpref/init/all.js
-@@ -522,25 +522,18 @@ pref("media.getusermedia.agc", 3); // kA
- // capture_delay: Adjustments for OS-specific input delay (lower bound)
- // playout_delay: Adjustments for OS-specific AudioStream+cubeb+output delay (lower bound)
- // full_duplex: enable cubeb full-duplex capture/playback
-+pref("media.navigator.audio.full_duplex", true);
- #if defined(XP_MACOSX)
- pref("media.peerconnection.capture_delay", 50);
--pref("media.navigator.audio.full_duplex", true);
- #elif defined(XP_WIN)
- pref("media.peerconnection.capture_delay", 50);
--pref("media.navigator.audio.full_duplex", true);
- #elif defined(ANDROID)
- pref("media.peerconnection.capture_delay", 100);
--pref("media.navigator.audio.full_duplex", true);
+@@ -532,7 +532,10 @@ pref("media.peerconnection.capture_delay
  pref("media.navigator.hardware.vp8_encode.acceleration_enabled", true);
  pref("media.navigator.hardware.vp8_encode.acceleration_remote_enabled", true);
  pref("media.navigator.hardware.vp8_decode.acceleration_enabled", false);
--#elif defined(XP_LINUX) || defined(MOZ_SNDIO)
--pref("media.peerconnection.capture_delay", 70);
--pref("media.navigator.audio.full_duplex", true);
- #else
--// *BSD, others - merely a guess for now
--pref("media.peerconnection.capture_delay", 50);
--pref("media.navigator.audio.full_duplex", false);
++#elif defined(XP_LINUX) || defined(MOZ_SNDIO)
 +pref("media.peerconnection.capture_delay", 70);
+ #else
++// *BSD, others - merely a guess for now
+ pref("media.peerconnection.capture_delay", 70);
  #endif
  // Use MediaDataDecoder API for WebRTC, this includes hardware acceleration for
- // decoding.
-@@ -1338,8 +1331,8 @@ pref("dom.forms.autocomplete.formautofil
+@@ -1331,8 +1334,8 @@ pref("dom.forms.autocomplete.formautofil
  // Enable search in <select> dropdowns (more than 40 options)
  pref("dom.forms.selectSearch", false);
  // Allow for webpages to provide custom styling for <select>