Compare commits

...

3 Commits

Author SHA256 Message Date
c8be6bd8a1 update patches 2025-08-30 12:07:28 +02:00
0d531519fc catch up changelog 2025-08-30 11:53:51 +02:00
cbdee2a757 bump to 141.0.7378.3 2025-08-30 11:51:41 +02:00
9 changed files with 69 additions and 117 deletions

View File

@@ -1,42 +0,0 @@
diff -up chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib chromium-121.0.6167.57/build/config/clang/BUILD.gn
--- chromium-121.0.6167.57/build/config/clang/BUILD.gn.rust-clang_lib 2024-01-10 16:43:01.000000000 +0100
+++ chromium-121.0.6167.57/build/config/clang/BUILD.gn 2024-01-20 19:51:38.481992799 +0100
@@ -166,8 +166,7 @@
_prefix = "lib"
_suffix = ""
_ext = "a"
-
- _clang_lib_dir = "$clang_base_path/lib/clang/$clang_version/lib"
+ _libprefix = ""
if (is_win) {
_dir = "windows"
_prefix = ""
@@ -197,7 +196,19 @@
} else {
assert(false) # Unhandled cpu type
}
- } else if (is_linux || is_chromeos) {
+ } else if (is_linux) {
+ _libprefix = "64"
+ _dir = "linux"
+ if (current_cpu == "x64") {
+ _suffix ="-x86_64"
+ } else if (current_cpu == "arm64") {
+ _suffix = "-aarch64"
+ } else if (current_cpu == "riscv64") {
+ _suffix = "-riscv64"
+ } else {
+ assert(false) # Unhandled cpu type
+ }
+ } else if (is_chromeos) {
if (current_cpu == "x64") {
_dir = "x86_64-unknown-linux-gnu"
} else if (current_cpu == "x86") {
@@ -236,6 +247,7 @@
assert(false) # Unhandled target platform
}
+ _clang_lib_dir = "$clang_base_path/lib${_libprefix}/clang/$clang_version/lib"
_lib_file = "${_prefix}clang_rt.${_libname}${_suffix}.${_ext}"
libs = [ "$_clang_lib_dir/$_dir/$_lib_file" ]

View File

@@ -1,8 +1,8 @@
Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
Index: chromium-141.0.7378.3/build/config/compiler/BUILD.gn
===================================================================
--- chromium-141.0.7354.0.orig/build/config/compiler/BUILD.gn
+++ chromium-141.0.7354.0/build/config/compiler/BUILD.gn
@@ -341,9 +341,7 @@ config("compiler") {
--- chromium-141.0.7378.3.orig/build/config/compiler/BUILD.gn
+++ chromium-141.0.7378.3/build/config/compiler/BUILD.gn
@@ -337,9 +337,7 @@ config("compiler") {
configs += [
# See the definitions below.
@@ -12,7 +12,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
":compiler_codegen",
":compiler_deterministic",
":clang_warning_suppression",
@@ -638,64 +636,6 @@ config("compiler") {
@@ -634,64 +632,6 @@ config("compiler") {
ldflags += [ "-Wl,-z,keep-text-section-prefix" ]
}
@@ -77,7 +77,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
# C11/C++11 compiler flags setup.
# ---------------------------
if (is_linux || is_chromeos || is_android || current_os == "aix") {
@@ -1646,43 +1586,6 @@ config("compiler_deterministic") {
@@ -1642,43 +1582,6 @@ config("compiler_deterministic") {
}
}
@@ -121,7 +121,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
# Tells the compiler not to use absolute paths when passing the default
# paths to the tools it invokes. We don't want this because we don't
# really need it and it can mess up the RBE cache entries.
@@ -1709,87 +1612,6 @@ config("compiler_deterministic") {
@@ -1705,87 +1608,6 @@ config("compiler_deterministic") {
}
}
@@ -209,7 +209,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
# Controls the usage of a warning suppression mapping (WSM) file to suppress
# warnings based on the path of the file they come from. It's controlled by the
# `clang_warning_suppression_file` gn argument , which points to a text file
@@ -2287,10 +2109,6 @@ config("chromium_code") {
@@ -2286,10 +2108,6 @@ config("chromium_code") {
}
} else {
cflags = [ "-Wall" ]
@@ -220,7 +220,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
# In Chromium code, we define __STDC_foo_MACROS in order to get the
# C99 macros on Mac and Linux.
@@ -2299,24 +2117,6 @@ config("chromium_code") {
@@ -2298,24 +2116,6 @@ config("chromium_code") {
"__STDC_FORMAT_MACROS",
]
@@ -236,7 +236,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
- # ChromeOS's toolchain supports a high-quality _FORTIFY_SOURCE=3
- # implementation with a few custom glibc patches. Use that if it's
- # available.
- if (is_chromeos_device && !lacros_use_chromium_toolchain) {
- if (is_chromeos_device) {
- fortify_level = "3"
- }
- defines += [ "_FORTIFY_SOURCE=" + fortify_level ]
@@ -245,7 +245,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
if (is_apple) {
cflags_objc = [ "-Wimplicit-retain-self" ]
cflags_objcc = [ "-Wimplicit-retain-self" ]
@@ -2736,7 +2536,8 @@ config("default_stack_frames") {
@@ -2735,7 +2535,8 @@ config("default_stack_frames") {
# [0]: https://pinpoint-dot-chromeperf.appspot.com/job/147634a8be0000
# [1]: https://pinpoint-dot-chromeperf.appspot.com/job/132bc772be0000
# [2]: https://crrev.com/c/5447532
@@ -255,7 +255,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
if (is_win) {
# clang-cl's /O2 corresponds to clang's -O3, and really want -O2 for
# consistency with the other platforms.
@@ -2785,7 +2586,8 @@ config("optimize") {
@@ -2784,7 +2585,8 @@ config("optimize") {
}
# Turn off optimizations.
@@ -265,7 +265,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
if (is_win) {
cflags = [
"/Od", # Disable optimization.
@@ -2820,7 +2622,8 @@ config("no_optimize") {
@@ -2819,7 +2621,8 @@ config("no_optimize") {
# Turns up the optimization level. Used to explicitly enable -O2 instead of
# -Os for select targets on platforms that use optimize_for_size. No-op
# elsewhere.
@@ -275,7 +275,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
ldflags = common_optimize_on_ldflags
if (is_win) {
# Favor speed over size, /O2 must be before the common flags.
@@ -2841,7 +2644,8 @@ config("optimize_max") {
@@ -2840,7 +2643,8 @@ config("optimize_max") {
#
# TODO(crbug.com/41259697) - rework how all of these configs are related
# so that we don't need this disclaimer.
@@ -285,7 +285,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
ldflags = common_optimize_on_ldflags
if (is_win) {
# Favor speed over size, /O2 must be before the common flags.
@@ -2858,7 +2662,8 @@ config("optimize_speed") {
@@ -2857,7 +2661,8 @@ config("optimize_speed") {
rustflags = [ "-Copt-level=3" ]
}
@@ -295,7 +295,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
cflags = [ "-O1" ] + common_optimize_on_cflags
rustflags = [ "-Copt-level=1" ]
ldflags = common_optimize_on_ldflags
@@ -2985,7 +2790,8 @@ config("win_pdbaltpath") {
@@ -2984,7 +2789,8 @@ config("win_pdbaltpath") {
}
# Full symbols.
@@ -305,7 +305,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
rustflags = []
configs = []
if (is_win) {
@@ -3141,7 +2947,8 @@ config("symbols") {
@@ -3140,7 +2946,8 @@ config("symbols") {
# Minimal symbols.
# This config guarantees to hold symbol for stack trace which are shown to user
# when crash happens in unittests running on buildbot.
@@ -315,7 +315,7 @@ Index: chromium-141.0.7354.0/build/config/compiler/BUILD.gn
rustflags = []
if (is_win) {
# Functions, files, and line tables only.
@@ -3217,7 +3024,8 @@ config("minimal_symbols") {
@@ -3216,7 +3023,8 @@ config("minimal_symbols") {
# This configuration contains function names only. That is, the compiler is
# told to not generate debug information and the linker then just puts function
# names in the final debug information.

View File

@@ -1,6 +1,8 @@
--- chromium-133.0.6943.98/media/base/media_switches.h 2025/02/18 15:56:48 1.1
+++ chromium-133.0.6943.98/media/base/media_switches.h 2025/02/18 15:57:20
@@ -516,6 +516,8 @@
Index: chromium-141.0.7378.3/media/base/media_switches.h
===================================================================
--- chromium-141.0.7378.3.orig/media/base/media_switches.h
+++ chromium-141.0.7378.3/media/base/media_switches.h
@@ -519,6 +519,8 @@ MEDIA_EXPORT BASE_DECLARE_FEATURE(
MEDIA_EXPORT BASE_DECLARE_FEATURE(kUseWindowBoundsForPip);
@@ -9,11 +11,13 @@
MEDIA_EXPORT BASE_DECLARE_FEATURE(kMediaLogToConsole);
MEDIA_EXPORT BASE_DECLARE_FEATURE(kLibvpxUseChromeThreads);
--- chromium-133.0.6943.98/media/base/media_switches.cc 2025/02/18 15:56:07 1.1
+++ chromium-133.0.6943.98/media/base/media_switches.cc 2025/02/18 15:56:48
@@ -1657,6 +1657,11 @@
"UseWindowBoundsForPip",
base::FEATURE_ENABLED_BY_DEFAULT);
Index: chromium-141.0.7378.3/media/base/media_switches.cc
===================================================================
--- chromium-141.0.7378.3.orig/media/base/media_switches.cc
+++ chromium-141.0.7378.3/media/base/media_switches.cc
@@ -1687,6 +1687,11 @@ bool IsRestrictOwnAudioSupported() {
#endif
}
+// Enables FFmpeg allow lists for supported codecs / containers.
+BASE_FEATURE(kFFmpegAllowLists,
@@ -21,11 +25,13 @@
+ base::FEATURE_DISABLED_BY_DEFAULT);
+
#if BUILDFLAG(IS_WIN)
// Enables audio offload when supported by endpoints.
BASE_FEATURE(kAudioOffload, "AudioOffload", base::FEATURE_DISABLED_BY_DEFAULT);
--- chromium-133.0.6943.98/media/ffmpeg/ffmpeg_common.cc 2025/02/18 16:03:18 1.1
+++ chromium-133.0.6943.98/media/ffmpeg/ffmpeg_common.cc 2025/02/18 16:04:02
@@ -19,6 +19,7 @@
bool IsMediaFoundationD3D11VideoCaptureEnabled() {
return base::FeatureList::IsEnabled(kMediaFoundationD3D11VideoCapture);
Index: chromium-141.0.7378.3/media/ffmpeg/ffmpeg_common.cc
===================================================================
--- chromium-141.0.7378.3.orig/media/ffmpeg/ffmpeg_common.cc
+++ chromium-141.0.7378.3/media/ffmpeg/ffmpeg_common.cc
@@ -16,6 +16,7 @@
#include "media/base/audio_decoder_config.h"
#include "media/base/decoder_buffer.h"
#include "media/base/encryption_scheme.h"
@@ -33,7 +39,7 @@
#include "media/base/media_util.h"
#include "media/base/supported_types.h"
#include "media/base/video_aspect_ratio.h"
@@ -76,7 +76,8 @@
@@ -72,7 +73,8 @@ const char* GetAllowedVideoDecoders() {
void ApplyCodecContextSecuritySettings(AVCodecContext* codec_context) {
// Future versions of ffmpeg may copy the allow list from the format
// context.
@@ -43,9 +49,11 @@
// Note: FFmpeg will try to free this string, so we must duplicate it.
codec_context->codec_whitelist =
av_strdup(codec_context->codec_type == AVMEDIA_TYPE_AUDIO
--- chromium-133.0.6943.98/media/filters/ffmpeg_glue.cc 2025/02/18 16:06:06 1.1
+++ chromium-133.0.6943.98/media/filters/ffmpeg_glue.cc 2025/02/18 16:07:06
@@ -131,8 +131,10 @@
Index: chromium-141.0.7378.3/media/filters/ffmpeg_glue.cc
===================================================================
--- chromium-141.0.7378.3.orig/media/filters/ffmpeg_glue.cc
+++ chromium-141.0.7378.3/media/filters/ffmpeg_glue.cc
@@ -137,8 +137,10 @@ FFmpegGlue::FFmpegGlue(FFmpegURLProtocol
// memory usage.
//
// Note: FFmpeg will try to free these strings, so we must duplicate them.

View File

@@ -1,22 +0,0 @@
--- chromium-135.0.7023.0/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc 2025/04/04 08:28:56 1.1
+++ chromium-135.0.7023.0/sandbox/linux/seccomp-bpf-helpers/syscall_parameters_restrictions.cc 2025/04/04 08:29:47
@@ -34,6 +34,10 @@
#include "sandbox/linux/system_headers/linux_syscalls.h"
#include "sandbox/linux/system_headers/linux_time.h"
+#if !defined(MAP_DROPPABLE)
+#define MAP_DROPPABLE 0x08 // Zero memory under memory pressure.
+#endif
+
#if BUILDFLAG(IS_LINUX) && !defined(__arm__) && !defined(__aarch64__) && \
!defined(PTRACE_GET_THREAD_AREA)
// Also include asm/ptrace-abi.h since ptrace.h in older libc (for instance
@@ -236,7 +240,7 @@
// TODO(davidung), remove MAP_DENYWRITE with updated Tegra libraries.
const uint64_t kAllowedMask = MAP_SHARED | MAP_PRIVATE | MAP_ANONYMOUS |
MAP_STACK | MAP_NORESERVE | MAP_FIXED |
- MAP_DENYWRITE | MAP_LOCKED |
+ MAP_DENYWRITE | MAP_LOCKED | MAP_DROPPABLE |
kArchSpecificAllowedMask;
const Arg<int> flags(3);
return If((flags & ~kAllowedMask) == 0, Allow()).Else(CrashSIGSYS());

View File

@@ -1,8 +1,10 @@
--- chromium-140.0.7339.5/build/rust/allocator/lib.rs 2025/08/12 12:48:58 1.1
+++ chromium-140.0.7339.5/build/rust/allocator/lib.rs 2025/08/12 12:49:30
@@ -90,6 +90,12 @@
#[linkage = "weak"]
fn __rust_no_alloc_shim_is_unstable_v2() {}
Index: chromium-141.0.7378.3/build/rust/allocator/lib.rs
===================================================================
--- chromium-141.0.7378.3.orig/build/rust/allocator/lib.rs
+++ chromium-141.0.7378.3/build/rust/allocator/lib.rs
@@ -96,6 +96,12 @@ mod both_allocators {
0
}
+ // TODO(crbug.com/422538133) Remove after rolling past
+ // https://github.com/rust-lang/rust/pull/141061
@@ -11,5 +13,5 @@
+ static __rust_no_alloc_shim_is_unstable: u8 = 0;
+
// Mangle the symbol name as rustc expects.
// TODO(crbug.com/440481922): Remove this after rolling past https://github.com/rust-lang/rust/pull/143387
#[rustc_std_internal_symbol]
#[allow(non_upper_case_globals)]

BIN
chromium-141.0.7367.0-linux.tar.xz (Stored with Git LFS)

Binary file not shown.

BIN
chromium-141.0.7378.3-linux.tar.xz (Stored with Git LFS) Normal file

Binary file not shown.

View File

@@ -1,16 +1,18 @@
-------------------------------------------------------------------
Sat Aug 23 19:50:33 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
Sat Aug 30 10:03:53 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
- Chromium 141.0.7367.0
(dev released 2025-08-21)
- Chromium 141.0.7378.3
(dev released 2025-08-28)
- dropped patches:
ppc-fedora-fix-rustc.patch (obsolete)
chromium-121-rust-clang_lib.patch
chromium-135-add_map_droppable.patch
-------------------------------------------------------------------
Wed Aug 20 19:24:57 UTC 2025 - ro@suse.de
Thu Aug 28 18:06:15 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
- Chromium 140.0.7339.24
(beta released 2025-08-20)
- Chromium 140.0.7339.41
(early stable released 2025-08-27)
- modified patches:
chromium-125-compiler.patch
chromium-libusb_interrupt_event_handler.patch
@@ -35,6 +37,12 @@ Wed Aug 20 19:24:57 UTC 2025 - ro@suse.de
- bump gn BuildReq to 0.20250619
- do not use system_harfbuzz for 16+ for now, unbundle is broken
-------------------------------------------------------------------
Wed Aug 27 12:12:26 CEST 2025 - ro@suse.de
- Chromium 139.0.7258.154 (boo#1248769)
* CVE-2025-9478: Use after free in ANGLE
-------------------------------------------------------------------
Tue Aug 19 21:07:41 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>

View File

@@ -117,7 +117,7 @@
%global official_build 1
Name: chromium%{n_suffix}
Version: 141.0.7367.0
Version: 141.0.7378.3
Release: 0
Summary: Google's open source browser project
License: BSD-3-Clause AND LGPL-2.1-or-later
@@ -152,7 +152,6 @@ Patch98: chromium-102-regex_pattern-array.patch
# PATCH-FIX-SUSE: allow prop codecs to be set with chromium branding
Patch202: chromium-prop-codecs.patch
Patch240: chromium-117-string-convert.patch
Patch261: chromium-121-rust-clang_lib.patch
Patch337: chromium-123-missing-QtGui.patch
Patch359: chromium-126-quiche-interator.patch
Patch360: chromium-127-bindgen.patch
@@ -164,7 +163,6 @@ Patch369: chromium-132-pdfium-explicit-template.patch
Patch371: chromium-133-bring_back_and_disable_allowlist.patch
Patch373: chromium-134-type-mismatch-error.patch
Patch375: chromium-131-fix-qt-ui.pach
Patch376: chromium-135-add_map_droppable.patch
Patch377: chromium-139-deterministic.patch
Patch378: chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
Patch379: chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch