Updating K-Meleon's rendering engine
You are here:  SillyDog701 > Message Centre > Firefox, SeaMonkey and Netscape > [sdt=8841]
SillyDog701 Forums
Author Message
beanboy89
diamond member


Joined: 16 May 2004
Posts: 1440
02 May, 2005 7:55 pm Updating K-Meleon's rendering engine [sdp=56447]  
K-Meleon 0.9 was released this past January. At the time of it's release, K-Meleon was using the latest Gecko rendering engine, 1.7.5. Since then, there have been two updates to Gecko due to various security related issues. K-Meleon 0.9 is still using an old, and possibly unsafe core. As a fix th this problem, Holger Metzger has provided a way to upgrade K-Meleon 0.9 to the latest 1.7.7 Gecko engine.

Holger Metzger wrote:
Update K-Meleon 0.9 to use the latest Mozilla Engine

1. Download the zip version of Mozilla 1.7.7. Click here.
2. Unzip the zip file, usually right-clicking on the file and selecting "Extract" should create a folder with the contents of the zip file.
3. With K-Meleon closed, copy the following files and folders from the Mozilla directory you have just created into your existing K-Meleon directory (usually c:\program files\k-meleon) and, when prompted, have existing files overwritten:
* components
* greprefs
* ipc
* res
* all *.dll files in the main directory (where mozilla.exe resides)
4. Start K-Meleon. Help --> About K-Meleon should now report a newer Mozilla version (1.7.7)
5. You may now test http://secunia.com/mozilla_products_arbitrary_memory_exposure_test/


I've tested this method with K-Meleon 0.9 and Mozilla 1.7.7, and it's worked flawlesly.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.7) Gecko/20050414 K-Meleon/0.9
Desktop: AMD Athlon 64 X2 3800+ 2.0 GHz, 2.0 GB RAM, 250 GB HDD, DVD-RW, Radeon x700SE, Windows Vista Ultimate x64
Laptop: AMD Turion 64 X2 TL-58 1.9 GHz, 2.0 GB RAM, 120 GB HDD, DVD-RW, NVIDIA GeForce Go 7200, Windows Vista Ultimate x64
Back to top profile website
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4534
02 May, 2005 8:02 pm [sdp=56448]  
This is definitely an interesting method of updating K-Meleon, or for that matter, any Gecko-based browser. It makes me wonder if this would work with some other browser, say, Netscape. If you do what I did with some of the early Donzilla builds and integrate the GRE right with the program (like how the ZIPped builds of Mozilla run), you may just be able to get a crashy Netscape 7.2 based on Mozilla 1.7.7. And if you want my opinion, there's a market for that.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Donzilla/0.7PR1.5 (wml/1.3)
Laptop: Turion 64 X2 @ 2GHz, 2GB PC5300, 100GB HD, Radeon X300, 15" LCD, Vista Ultimate x64
Web server: P2 @ 233MHz, 280MB PC66, 20GB HD, 13.3" LCD, Windows Server 2003 x86
Misc. server: MIPS32 @ 216MHz, 16MB PC100, 4MB flash, DD-WRT Linux mipsel
Back to top profile website
dmbtech
member


Joined: 12 Jul 2004
Posts: 29
03 May, 2005 12:47 pm [sdp=56477]  
I believe it would be easy enough to post an actual binary update without recompiling the whole thing that way. Why not just make an xpi and installs the update? Does Kmelion support xpis?

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050106 Firefox/1.0
Back to top profile
Don_HH2K
Moderator


Joined: 09 May 2004
Posts: 4534
03 May, 2005 1:30 pm [sdp=56481]  
No K-Meleon doesn't support XPI files.

Getting back to an XPI installer, though, that isn't possible, as your operating system would report that the files are already in use (since they are, and you'd be trying to write over them). It would be good if somebody could come up with a native way of doing it with Netscape closed, say, with an MS-DOS batch file or an MSI package.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.7) Gecko/20050414 Donzilla/0.7PR1.5 (wml/1.3)
Laptop: Turion 64 X2 @ 2GHz, 2GB PC5300, 100GB HD, Radeon X300, 15" LCD, Vista Ultimate x64
Web server: P2 @ 233MHz, 280MB PC66, 20GB HD, 13.3" LCD, Windows Server 2003 x86
Misc. server: MIPS32 @ 216MHz, 16MB PC100, 4MB flash, DD-WRT Linux mipsel
Back to top profile website
dmbtech
member


Joined: 12 Jul 2004
Posts: 29
03 May, 2005 4:33 pm [sdp=56488]  
If i remember correctly, firefox used to do that when upgrading the preview released, it was able to replace the old files with the new files, and after you restarted it works. On linux of coarse, im able to that no matter what.

UserAgent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8b2) Gecko/20050503 Firefox/1.0+
Back to top profile
Pu7o
Macfox


Joined: 06 Jan 2005
Posts: 1952
Location: Portugal
12 May, 2005 3:40 pm [sdp=56971]  
I wonder, would this work with Camino?

UserAgent: Mozilla/5.0 (compatible; Konqueror/3.2; Darwin 7.9.0; X11; Power Macintosh; ) (KHTML, like Gecko)
Henceforth, you shall be known as... Darth Extremist.
Back to top profile website
DJGM
diamond member


Joined: 19 Jun 2002
Posts: 4338
Location: Manchester, England, UK
12 May, 2005 4:04 pm [sdp=56974]  
Pu7o wrote:

I wonder, would this work with Camino?


Since K-Meleon is a Windows only browser, the above method will only work on Windows.
Although I'm sure someone could find a Mac version of that method to work on Camino.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.2; en-GB; rv:1.7.8) Gecko/20050511 Firefox/1.0.4
Mozilla = Swiss Army Knife: It's versatile, reliable, and contains useful tools.
Microsoft Internet Explorer = Old Swiss Cheese: Full of holes, and it stinks!
Back to top profile website
burnerO
junior member


Joined: 11 May 2005
Posts: 8
12 May, 2005 7:24 pm [sdp=56988]  
This seems to also work to some extent for Netscape 8.

I copied components, grep, res and all dlls from the root directory of a Firefox 1.0.4 installation and it seems to have patched at least this exploit:
http://secunia.com/mozilla_products_arbitrary_memory_exposure_test/

The spoofing exploit is still flawed, but this ought to be investigated by someone with more of a clue than myself.

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20050308 Firefox/0.9.6
Back to top profile
Josh
Moderator


Joined: 21 Jun 2002
Posts: 683
12 May, 2005 10:15 pm [sdp=56999]  
App Suite 1.7.8 is the new release. It fixes some of the vulns found this week. I used the instructions found in this thread, and it works!

Thanks everyone!

UserAgent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.8) Gecko/20050511 K-Meleon/0.9
Josh
SD701 Moderator
User of Firefox 2.0 on Tiger
HoshieMix on iTMS (USA)
Back to top profile website
beanboy89
diamond member


Joined: 16 May 2004
Posts: 1440
11 Oct, 2005 8:48 pm [sdp=64715]  
An update for this thread:

The above method for updating the Gecko inside K-Meleon no longer works with recent versions of Mozilla. I belive it broke sometime after the Mozilla 1.7.8 release; if the original way of updating was tried with a more recent Mozilla build, it caused K-Meleon to "break," or simply refuse to run, accompanied with a slew of error messages.

Holger Metzger has provided updated instructions for updating K-Meleon's rendering engine on his website.

Holger Metzger wrote:
Update K-Meleon 0.9 to use the latest Mozilla Engine

1. Download the ZIP-version of Mozilla 1.7.12. Click here (you may also use any Mozilla 1.7.x nightly)
2. Unzip the ZIP file (usually right-clicking on the file and selecting »Extract« should create a folder with the contents of the file).
3. With K-Meleon closed, copy the following files and folders from the Mozilla directory you have just created into your existing K-Meleon directory (default is c:\program files\k-meleon) and, when prompted, have existing files overwritten:
* components
* ipc
* res
* in /chrome/: toolkit.jar
* all *.dll files in the main directory (where mozilla.exe resides).
Note: This is the »quick'n'dirty« way; the cleaner procedure would be to just copy the same files that can be found in the K-Meleon directory. This can be accomplished with "xcopy", e.g.
xcopy c:\mozilla\*.* %programfiles%\K-Meleon\ /U /Q /Y
You may want to create a batch file that automates the process of updating (see kmeleon.bat)
* Please note: after you copied the files you have to delete the following two files in the \components\ folder: compreg.dat, xpti.dat. Deleting these two files is necessary so that the history works correctly in K-Meleon.
* It may also be a good idea to get rid of (i.e. delete) chrome.rdf in c:\program files\K-Meleon\Profiles\...\chrome\ so that K-Meleon will be able to pick up changes correctly. Sometimes it may also be necessary to delete overlayinfo.* in the same Profile folder.
* Start K-Meleon. Help --> About K-Meleon should now report an up-to-date Mozilla version (1.7.10)
* There are more (unofficial) builds of K-Meleon available already featuring new Gecko-Engines (and much more). Visit the K-Meleon forums for details.


I have successfully updated K-Meleon 0.9 to run on Gecko 1.7.12 with the revised method.

UserAgent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:1.7.12) Gecko/20050915 K-Meleon/0.9
Desktop: AMD Athlon 64 X2 3800+ 2.0 GHz, 2.0 GB RAM, 250 GB HDD, DVD-RW, Radeon x700SE, Windows Vista Ultimate x64
Laptop: AMD Turion 64 X2 TL-58 1.9 GHz, 2.0 GB RAM, 120 GB HDD, DVD-RW, NVIDIA GeForce Go 7200, Windows Vista Ultimate x64
Back to top profile website
Display posts from previous:   
Reply to topic    Forum Index > Firefox, SeaMonkey and Netscape All times are CST (GMT -6)
page 1 of 1
To add your questions, comments, and for more features and more, please join SillyDog701 Message Centre. It's free! This is SillyDog 701 Message Centre (SD701 Forums).
Harley-Davidson - shop online for harley davidson parts & accessories at 20% discount.
Buy Text Links - buy and/or sell text link ads.

Finding Nemo iTunes .Mac

*Search | FAQ | Rules and Policies | MozInfo701 - Mozilla Information Centre | SD701 Open Directory | Message Board Map | download Netscape