On 11 Nov, Jim Jagielski wrote:
> Can you provide some log files that show how it breaks?
>
>> On Nov 10, 2026, at 7:44 PM, Don Lewis via commits
>> <[email protected]> wrote:
>>
>> On 3 Nov, pfg.apache.org via commits wrote:
>>> This is an automated email from the ASF dual-hosted git repository.
>>>
>>> asf-gitbox-commits pushed a commit to branch trunk
>>> in repository https://gitbox.apache.org/repos/asf/openoffice.git
>>>
>>>
>>> The following commit(s) were added to refs/heads/trunk by this push:
>>> new a0d841013a Rhino 1.7.7.2 integration: security hardening, patch
>>> fixes, ES6 default mode
>>> a0d841013a is described below
>>>
>>> commit a0d841013a7b93e3bcedcaed86403bb1797490bd
>>> Author: Pedro Giffuni <[email protected]>
>>> AuthorDate: Tue Nov 3 03:37:55 2026 -0500
>>>
>>> Rhino 1.7.7.2 integration: security hardening, patch fixes, ES6 default
>>> mode
>>>
>>> Security hardening:
>>> - E4X/XML: harden XmlProcessor against XXE (external entities, parameter
>>> entities, external DTD, XInclude, external stylesheet).
>>> TransformerFactory
>>> configured with FEATURE_SECURE_PROCESSING and ACCESS_EXTERNAL_*;
>>> explicit
>>> empty entity resolver as defense-in-depth.
>>> - toFixed(): bound computational cost for tiny/subnormal values using
>>> 0.5 * 10^(-precision) comparison (no overflow, numerically stable),
>>> preventing DoS on inputs like (4.47118444E-314).toFixed(2).
>>> - DefiningClassLoader: call Thread.getContextClassLoader() directly
>>> instead
>>> of reflection (available since Java 2, no Java2 concern on Java 8).
>>>
>>> Patch fixes:
>>> - java-version.patch: target-jvm/source-level 1.6 -> 1.8 (Java 8
>>> minimum).
>>> - Main: getIn()/getOut()/getErr() fall back to System.in/out/err instead
>>> of
>>> returning null when debugger console unavailable.
>>> - build.xml: inline manifest (Implementation-Version: 1.7.7.2), ships
>>> Messages.properties in JAR; full js.jar with debugger+tools preserved.
>>>
>>> Language mode:
>>> - Default Context.VERSION_ES6 in ScriptProviderForJavaScript and
>>> ScriptEditorForJavaScript.
>>>
>>> Build note:
>>> - Rhino 1.7.7.2 is the last Rhino version supporting the Ant build;
>>> upstream migrated to Gradle thereafter.
>>>
>>> Regression tests (not committed): TestXXEResgression (11 pass),
>>> TestToFixedRegression (32 pass), TestES6Smoke (5 pass).
>>> ---
>>> main/LICENSE_category_b | 4 +-
>>> main/external_deps.lst | 6 +-
>>> main/rhino/README | 23 +-
>>> main/rhino/makefile.mk | 11 +-
>>> main/rhino/prj/d.lst | 2 +-
>>> main/rhino/rhino-1.7.7.2-definingclassloader.patch | 66 ++
>>> main/rhino/rhino-1.7.7.2-main.patch | 38 +
>>> main/rhino/rhino-1.7.7.2-tofixed-fix.patch | 43 +
>>> main/rhino/rhino-1.7.7.2-xxe-fix.patch | 61 +
>>> main/rhino/rhino1_7R3-java-version.patch | 13 -
>>> main/rhino/rhino1_7_7_2-java-version.patch | 14 +
>>> .../rhino/{rhino1_7R3.patch => rhino1_7_7_2.patch} | 1228
>>> +++++++++-----------
>>> .../script/framework/provider/ScriptContext.java | 11 +-
>>> .../script/framework/provider/ScriptProvider.java | 2 +-
>>> .../javascript/ScriptEditorForJavaScript.java | 21 +-
>>> .../javascript/ScriptProviderForJavaScript.java | 24 +-
>>> 16 files changed, 825 insertions(+), 742 deletions(-)
>>>
>>> diff --git a/main/LICENSE_category_b b/main/LICENSE_category_b
>>> index 5603eeb568..f512564201 100644
>>> --- a/main/LICENSE_category_b
>>> +++ b/main/LICENSE_category_b
>>> @@ -20,8 +20,8 @@ ____
>>> -- GPL 2.0/LGPL 2.1/MPL 1.1 tri-license
>>> MPL 1.1 is chosen for Apache OpenOffice
>>> - For Rhino
>>> --- MPL 1.1 / GPL 2.0 dual licensed
>>> - MPL 1.1 is chosen for Apache OpenOffice
>>> +-- MPL 2.0
>>> + MPL 2.0 is chosen for Apache OpenOffice
>>>
>>>
>>> MOZILLA PUBLIC LICENSE
>>> diff --git a/main/external_deps.lst b/main/external_deps.lst
>>> index b7ddf2a260..95db5cb62f 100644
>>> --- a/main/external_deps.lst
>>> +++ b/main/external_deps.lst
>>> @@ -292,9 +292,9 @@ if (ENABLE_CATEGORY_B==YES && SYSTEM_HUNSPELL!=YES)
>>> URL2 = $(OOO_EXTRAS)$(MD5)-$(name)
>>>
>>> if (ENABLE_CATEGORY_B==YES && SOLAR_JAVA==TRUE && ENABLE_JAVASCRIPT==YES)
>>> - MD5 = 99d94103662a8d0b571e247a77432ac5
>>> - name = rhino1_7R3.zip
>>> - URL1 = https://ftp.mozilla.org/pub/js/$(name)
>>> + MD5 = afcf570784ebd919c1d484a6d0d3fcd6
>>> + name = rhino-1.7.7.2.zip
>>> + URL1 =
>>> https://github.com/mozilla/rhino/releases/download/Rhino1_7_7_2_Release/$(name)
>>> URL2 = $(OOO_EXTRAS)$(MD5)-$(name)
>>>
>>> if (ENABLE_CATEGORY_B==YES && ENABLE_NSS_MODULE==YES)
>>
>>
>> To get the FreeBSD port to build, I need something like the following
>> patch. Both 1.7.7.2 and 1.7.15.1 are broken. I don't see anything that
>> create the version of the filename with underscores, which causes the
>> rhino source to fail to unpack.
>>
>> <rhino.patch>
$ ls ../../ext_sources/
0168229624cfac409e766913506961a8-ucpp-1.3.2.tar.gz
0dd138efff4412c707e239290fb82d4f-mdds_0.3.1.tar.bz2
128cfc86ed5953e57fe0f5ae98b62c2e-libtextcat-2.2.tar.gz
17410483b5b5f267aa18b7e00b65e6e0-hsqldb_1_8_0.zip
1756c4fa6c616ae15973c104cd8cb256-Adobe-Core35_AFMs-314.tar.gz
17960f35b2239654ba608cf1f3e256b3-lucene-2.9.4-src.tar.gz
1f24ab1d39f4a51faf22244c94a6203f-xmlsec1-1.2.14.tar.gz
284e768eeda0e2898b0d5bf7e26a016e-raptor-1.4.18.tar.gz
2d6ec8ccdf5c46b05ba54a9fd1d130d7-gtest-1.7.0.zip
2f6ecca935948f7db92d925d88d0d078-icu4c-4_0_1-src.tgz
8344c82677a7ba961b74ea193a178e1b-SampleICC-1.6.11.zip
980143f96b3f6ce45d2e4947da21a5e9-stax-src-1.2.0.zip
99d94103662a8d0b571e247a77432ac5-rhino1_7R3.zip
9dcd632441e4da04a461082ebbafd337-boost_1_84_0.tar.bz2
a7983f859eafb2677d7ff386a023bc40-xsltml_2.1.2.zip
ada24d37d8d638b3d8a9985e80bc2978-source-9.0.0.7-bj.zip
b98c6c3ec884277f253028abf91d257b-rhino-1.7.15.1.zip
d62650a6f908e85643e557a236ea989c-vigra1.6.0.tar.gz
e3738abd0d3ce1870dc1fd1f22bba5b1-icu4c-4_2_1-src.tgz
fca8706f2c4619e2fa3f8f42f8fc1e9d-rasqal-0.9.16.tar.gz
fdb27bfe2dbe2e7b57ae194d9bf36bab-SampleICC-1.3.2.tar.gz
$ build --from rhino
build -- version: -
=============
Building module rhino
=============
Entering /wrkdirs/usr/ports/editors/openoffice-devel/work/aoo-5.1.0/main/rhino
mkout -- version: 1.8
dmake: Error: --
`./unxfbsdx.pro/misc/b98c6c3ec884277f253028abf91d257b-rhino1_7_15_1.unpack' not
found, and can't be made
1 module(s):
rhino
need(s) to be rebuilt
Reason(s):
ERROR: error 65280 occurred while making
/wrkdirs/usr/ports/editors/openoffice-devel/work/aoo-5.1.0/main/rhino
When you have fixed the errors in that module you can resume the build by
running:
build --from rhino
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
