# General

The audit begins at the commit hash where the previous audit ended. Use code_audit.sh for creating the diff and highlighting potentially problematic code. The audit is scoped to a specific language (currently C/C++, Rust, Java/Kotlin, and Javascript).

The output includes the entire patch where the new problematic code was introduced. Search for `XXX MATCH XXX` to find the next potential violation.

`code_audit.sh` contains the list of known problematic APIs. New usage of these functions are documented and analyzed in this audit.

## Firefox: https://github.com/mozilla/gecko-dev.git

- Start: `ac898d40ded7de23ef22a6f336f2ab1f0bca0d3f` ( `FIREFOX_106_0_5_RELEASE` )
- End:   `1187da3c99c93ad941eea0809d3b2c8f81ac5ccf`  ( `FIREFOX_107_0_1_RELEASE` )

### Languages:
- [x] java
- [x] cpp
- [x] js
- [x] rust

Nothing of interest (using `code_audit.sh`)

---

## Application Services: https://github.com/mozilla/application-services.git

- Start: `f1276e45b7c284bc4435896b1d5d09b35f3b295b` ( `v95.0.1` )
- End:   `ce8f1767d991da9d6d26331faecd426210071c7e`  ( `v96.1.0` )

### Languages:
- [x] java
- [x] cpp
- [x] js
- [x] rust

Nothing of interest (using `code_audit.sh`)

## Android Components: https://github.com/mozilla-mobile/android-components.git

- Start: `1c48533cff068056259e62861344bd8a490a83e7`
- End:   `ff4f1f8ae3c12e6f6e0dcf52f88049ca251470d8`  ( `v107.0.3` )

### Languages:
- [x] java
- [x] cpp
- [x] js
- [x] rust

Nothing of interest (using `code_audit.sh`)

## Fenix: https://github.com/mozilla-mobile/fenix.git

- Start: `8c088f08d339514ac12732bffdc9bb90540d9337` ( `v107.0b1` )
- End:   `1490acda7e44894c8437cc7fb677d3fba1a711ce`  ( `v107.2.0` )

### Languages:
- [x] java
- [x] cpp
- [x] js
- [x] rust

Nothing of interest (using `code_audit.sh`)

## Ticket Review ##

Bugzilla Query: `https://bugzilla.mozilla.org/buglist.cgi?query_format=advanced&resolution=FIXED&target_milestone=107%20Branch&order=priority%2Cbug_severity&limit=0`

where `$(FIREFOX_VERSION)` is the major Firefox version we are auditing (eg: '91')

Nothing of interest (manual inspection)

## Export
- [x] Export Report and save to `tor-browser-spec/audits`