2025-09-04 16:27:17 +02:00
18 changed files with 64671 additions and 78604 deletions
--- a/INSTALL.sh
+++ b/INSTALL.sh
@@ -127,7 +127,6 @@ if [ -f "${OUTPUTDIR}/libffmpeg.so" ]; then
    install -m ${SHLIB_PERMS} "${buildfile}" "${STAGEDIR}/${INSTALLDIR}/${file}"
 fi

-
 # default apps
 if [ -d "${OUTPUTDIR}/default_apps" ]; then
    cp -a "${OUTPUTDIR}/default_apps" "${STAGEDIR}/${INSTALLDIR}/"
--- a/chromium-102-regex_pattern-array.patch
+++ b/chromium-102-regex_pattern-array.patch
@@ -1,8 +1,6 @@
-Index: chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
-===================================================================
--- chromium-123.0.6312.46.orig/components/autofill/core/browser/BUILD.gn
-+++ chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
-@@ -64,6 +64,11 @@
+--- chromium-140.0.7327.6/components/autofill/core/browser/BUILD.gn	2025/08/01 09:33:04	1.1
+++ chromium-140.0.7327.6/components/autofill/core/browser/BUILD.gn	2025/08/01 09:34:47
+@@ -75,6 +75,11 @@
 }
 
 static_library("browser") {
@@ -12,5 +10,5 @@ Index: chromium-123.0.6312.46/components/autofill/core/browser/BUILD.gn
 +    ]
 +  }
   sources = [
-     "autofill_browser_util.cc",
-     "autofill_browser_util.h",
+     "autofill_ai_form_rationalization.cc",
+     "autofill_ai_form_rationalization.h",
--- a/chromium-125-compiler.patch
+++ b/chromium-125-compiler.patch
@@ -1,6 +1,6 @@
--- chromium-138.0.7191.0/build/config/compiler/BUILD.gn	2025/05/26 08:54:48	1.1
-+++ chromium-138.0.7191.0/build/config/compiler/BUILD.gn	2025/05/26 08:56:08
-@@ -310,9 +310,7 @@
+--- chromium-140.0.7259.2/build/config/compiler/BUILD.gn	2025/06/27 14:34:16	1.1
+++ chromium-140.0.7259.2/build/config/compiler/BUILD.gn	2025/06/27 14:36:19
+@@ -312,9 +312,7 @@
 
   configs += [
     # See the definitions below.
@@ -10,11 +10,11 @@
     ":compiler_codegen",
     ":compiler_deterministic",
     ":clang_warning_suppression",
-@@ -581,63 +579,6 @@
+@@ -603,66 +603,6 @@
     ldflags += [ "-Wl,-z,keep-text-section-prefix" ]
   }
 
-  if (is_clang && !is_nacl) {
+-  if (is_clang) {
 -    cflags += [ "-fcrash-diagnostics-dir=" + clang_diagnostic_dir ]
 -    if (save_reproducers_on_lld_crash && use_lld) {
 -      ldflags += [
@@ -65,7 +65,10 @@
 -    # Enable ELF CREL (see crbug.com/357878242) for all platforms that use ELF
 -    # (excluding toolchains that use an older version of LLVM).
 -    # TODO(crbug.com/376278218): This causes segfault on Linux ARM builds.
+-    # It also causes segfault on Linux s390x:
+-    # https://github.com/llvm/llvm-project/issues/149511
 -    if (is_linux && use_lld && !llvm_android_mainline && current_cpu != "arm" &&
+-        current_cpu != "s390x" &&
 -        default_toolchain != "//build/toolchain/cros:target") {
 -      cflags += [ "-Wa,--crel,--allow-experimental-crel" ]
 -    }
@@ -73,8 +76,8 @@
 -
   # C11/C++11 compiler flags setup.
   # ---------------------------
-   if (is_linux || is_chromeos || is_android || (is_nacl && is_clang) ||
-@@ -1596,52 +1537,6 @@
+   if (is_linux || is_chromeos || is_android || current_os == "aix") {
+@@ -1598,43 +1539,6 @@
     }
   }
 
@@ -85,26 +88,17 @@
 -    # different build directory like "out/feature_a" and "out/feature_b" if
 -    # we build same files with same compile flag.
 -    # Other paths are already given in relative, no need to normalize them.
-    if (is_nacl) {
-      # TODO(https://crbug.com/1231236): Use -ffile-compilation-dir= here.
-      cflags += [
-        "-Xclang",
-        "-fdebug-compilation-dir",
-        "-Xclang",
-        ".",
-      ]
-    } else {
-      # -ffile-compilation-dir is an alias for both -fdebug-compilation-dir=
-      # and -fcoverage-compilation-dir=.
-      cflags += [ "-ffile-compilation-dir=." ]
 -
-      # Convert absolute paths to relative paths. Expands to, for example:
-      #   -file-prefix-map /path/to/chromium/src=../..
-      swiftflags += [
-        "-file-prefix-map",
-        rebase_path("//.", "") + "=" + rebase_path("//.", root_build_dir),
-      ]
-    }
+-    # -ffile-compilation-dir is an alias for both -fdebug-compilation-dir=
+-    # and -fcoverage-compilation-dir=.
+-    cflags += [ "-ffile-compilation-dir=." ]
+-
+-    # Convert absolute paths to relative paths. Expands to, for example:
+-    #   -file-prefix-map /path/to/chromium/src=../..
+-    swiftflags += [
+-      "-file-prefix-map",
+-      rebase_path("//.", "") + "=" + rebase_path("//.", root_build_dir),
+-    ]
 -    if (!is_win) {
 -      # We don't use clang -cc1as on Windows (yet? https://crbug.com/762167)
 -      asmflags = [ "-Wa,-fdebug-compilation-dir,." ]
@@ -127,7 +121,7 @@
   # Tells the compiler not to use absolute paths when passing the default
   # paths to the tools it invokes. We don't want this because we don't
   # really need it and it can mess up the RBE cache entries.
-@@ -1660,87 +1555,6 @@
+@@ -1661,87 +1565,6 @@
   }
 }
 
@@ -215,7 +209,7 @@
 # Controls the usage of a warning suppression mapping (WSM) file to suppress
 # warnings based on the path of the file they come from. It's controlled by the
 # `clang_warning_suppression_file` gn argument , which points to a text file
-@@ -2231,10 +2045,6 @@
+@@ -2229,10 +2052,6 @@
     }
   } else {
     cflags = [ "-Wall" ]
@@ -226,7 +220,7 @@
 
     # In Chromium code, we define __STDC_foo_MACROS in order to get the
     # C99 macros on Mac and Linux.
-@@ -2243,24 +2053,6 @@
+@@ -2241,24 +2060,6 @@
       "__STDC_FORMAT_MACROS",
     ]
 
@@ -251,7 +245,7 @@
     if (is_apple) {
       cflags_objc = [ "-Wimplicit-retain-self" ]
       cflags_objcc = [ "-Wimplicit-retain-self" ]
-@@ -2676,7 +2468,8 @@
+@@ -2673,7 +2474,8 @@
 # [0]: https://pinpoint-dot-chromeperf.appspot.com/job/147634a8be0000
 # [1]: https://pinpoint-dot-chromeperf.appspot.com/job/132bc772be0000
 # [2]: https://crrev.com/c/5447532
@@ -261,7 +255,7 @@
   if (is_win) {
     # clang-cl's /O2 corresponds to clang's -O3, and really want -O2 for
     # consistency with the other platforms.
-@@ -2725,7 +2518,8 @@
+@@ -2722,7 +2524,8 @@
 }
 
 # Turn off optimizations.
@@ -271,28 +265,28 @@
   if (is_win) {
     cflags = [
       "/Od",  # Disable optimization.
-@@ -2760,7 +2554,8 @@
+@@ -2757,7 +2560,8 @@
 # Turns up the optimization level. Used to explicitly enable -O2 instead of
 # -Os for select targets on platforms that use optimize_for_size. No-op
 # elsewhere.
 -config("optimize_max") {
 +config("optimize_max") { }
 +config("xoptimize_max") {
-   if (is_nacl && is_nacl_irt) {
-     # The NaCl IRT is a special case and always wants its own config.
-     # Various components do:
-@@ -2793,7 +2588,8 @@
+   ldflags = common_optimize_on_ldflags
+   if (is_win) {
+     # Favor speed over size, /O2 must be before the common flags.
+@@ -2778,7 +2582,8 @@
 #
 # TODO(crbug.com/41259697) - rework how all of these configs are related
 # so that we don't need this disclaimer.
 -config("optimize_speed") {
 +config("optimize_speed") { }
 +config("xoptimize_speed") {
-   if (is_nacl && is_nacl_irt) {
-     # The NaCl IRT is a special case and always wants its own config.
-     # Various components do:
-@@ -2822,7 +2618,8 @@
-   }
+   ldflags = common_optimize_on_ldflags
+   if (is_win) {
+     # Favor speed over size, /O2 must be before the common flags.
+@@ -2795,7 +2600,8 @@
+   rustflags = [ "-Copt-level=3" ]
 }
 
 -config("optimize_fuzzing") {
@@ -301,7 +295,7 @@
   cflags = [ "-O1" ] + common_optimize_on_cflags
   rustflags = [ "-Copt-level=1" ]
   ldflags = common_optimize_on_ldflags
-@@ -2953,7 +2750,8 @@
+@@ -2922,7 +2728,8 @@
 }
 
 # Full symbols.
@@ -311,7 +305,7 @@
   rustflags = []
   configs = []
   if (is_win) {
-@@ -3124,7 +2922,8 @@
+@@ -3089,7 +2896,8 @@
 # Minimal symbols.
 # This config guarantees to hold symbol for stack trace which are shown to user
 # when crash happens in unittests running on buildbot.
@@ -321,7 +315,7 @@
   rustflags = []
   if (is_win) {
     # Functions, files, and line tables only.
-@@ -3209,7 +3008,8 @@
+@@ -3165,7 +2973,8 @@
 # This configuration contains function names only. That is, the compiler is
 # told to not generate debug information and the linker then just puts function
 # names in the final debug information.
--- a/chromium-139.0.7258.154-linux.tar.xz
+++ b/chromium-139.0.7258.154-linux.tar.xz
--- a/chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
+++ b/chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
@@ -0,0 +1,15 @@
+--- chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:48:58	1.1
+++ chromium-140.0.7339.5/build/rust/allocator/lib.rs	2025/08/12 12:49:30
+@@ -90,6 +90,12 @@
+     #[linkage = "weak"]
+     fn __rust_no_alloc_shim_is_unstable_v2() {}
+ 
+    // TODO(crbug.com/422538133) Remove after rolling past
+    // https://github.com/rust-lang/rust/pull/141061
+    #[no_mangle]
+    #[linkage = "weak"]
+    static __rust_no_alloc_shim_is_unstable: u8 = 0;
+
+     // Mangle the symbol name as rustc expects.
+     #[rustc_std_internal_symbol]
+     #[allow(non_upper_case_globals)]
--- a/chromium-140-old-flac.patch
+++ b/chromium-140-old-flac.patch
@@ -0,0 +1,11 @@
+--- chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:29:53	1.1
+++ chromium-140.0.7339.5/media/audio/flac_audio_handler.cc	2025/08/13 10:30:09
+@@ -166,7 +166,7 @@
+   // `FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA` is the last enumeration
+   // value of `FLAC__StreamDecoderErrorStatus`. The legal status value should be
+   // less than or equal to it.
+-  CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
+  // CHECK_LE(status, FLAC__STREAM_DECODER_ERROR_STATUS_BAD_METADATA);
+   LOG(ERROR) << "Got an error callback: "
+              // SAFETY: The above CHECK ensures that `status` does not exceed
+              // the length of `FLAC__StreamDecoderErrorStatusString`
--- a/chromium-140.0.7339.80-linux.tar.xz
+++ b/chromium-140.0.7339.80-linux.tar.xz
--- a/chromium-libusb_interrupt_event_handler.patch
+++ b/chromium-libusb_interrupt_event_handler.patch
@@ -1,10 +1,10 @@
 diff -up chromium-48.0.2564.116/services/device/usb/usb_context.cc.modern-libusbx chromium-48.0.2564.116/device/usb/usb_context.cc
 --- chromium-48.0.2564.116/services/device/usb/usb_context.cc.modern-libusbx	2016-02-24 10:21:10.534996028 -0500
 +++ chromium-48.0.2564.116/services/device/usb/usb_context.cc	2016-02-24 10:22:28.270499864 -0500
-@@ -57,7 +57,11 @@ void UsbContext::UsbEventHandler::Run()
+@@ -63,7 +63,11 @@
 
 void UsbContext::UsbEventHandler::Stop() {
-   base::subtle::Release_Store(&running_, 0);
+   running_.store(false, std::memory_order_release);
 +#ifdef LIBUSB_API_VERSION >= 0x01000105
 +  libusb_interrupt_event_handler(context_);
 +#else
--- a/chromium.changes
+++ b/chromium.changes
@@ -1,3 +1,50 @@
+-------------------------------------------------------------------
+Tue Sep  2 22:29:06 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 140.0.7339.80 (boo#1249093):
+  * new permission prompt for local network access
+  * CVE-2025-9864: Use after free in V8
+  * CVE-2025-9865: Inappropriate implementation in Toolbar
+  * CVE-2025-9866: Inappropriate implementation in Extensions
+  * CVE-2025-9867: Inappropriate implementation in Downloads
+  * Various fixes from internal audits, fuzzing and other initiatives
+
+-------------------------------------------------------------------
+Tue Sep  2 23:02:23 CEST 2025 - ro@suse.de
+
+- modified patches:
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch
+  (updated from debian) 
+
+-------------------------------------------------------------------
+Thu Aug 28 18:06:15 UTC 2025 - Andreas Stieger <andreas.stieger@gmx.de>
+
+- Chromium 140.0.7339.41
+  (early stable released 2025-08-27)
+- modified patches:
+  chromium-125-compiler.patch
+  chromium-libusb_interrupt_event_handler.patch
+  gcc-enable-lto.patch
+  ppc-fedora-fix-unknown-warning-option-messages.diff
+  ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch 
+  ppc-fedora-add-ppc64-architecture-to-extensions.diff
+  chromium-102-regex_pattern-array.patch
+  gtk-414.patch
+  ppc-fedora-fix-study-crash.patch
+  ppc-fedora-0002-regenerate-xnn-buildgn.patch (stub, needs to be redone)
+  ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
+- added patches:
+  chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
+  (revert of upstream patch
+   8393b61ba876c8e1614275c97767f9b06b889f48)
+  chromium-140-old-flac.patch (applied for flac < 1.5.0)
+- change rust_version to 1.86
+- keeplibs:
+  removed buildtools/third_party/eu-strip (gone upstream)
+  removed wasm_tts_engine (gone upstream)
+- bump gn BuildReq to 0.20250619
+- do not use system_harfbuzz for 16+ for now, unbundle is broken
+
 -------------------------------------------------------------------
 Wed Aug 27 12:12:26 CEST 2025 - ro@suse.de

--- a/chromium.spec
+++ b/chromium.spec
@@ -42,7 +42,7 @@
 %bcond_without swiftshader
 %endif
 %if 0%{?suse_version} >= 1600
-%bcond_without system_harfbuzz
+%bcond_with system_harfbuzz
 %bcond_without system_freetype
 %bcond_without arm_bti
 # ERROR Unresolved dependencies.
@@ -67,7 +67,7 @@
 # LLVM version
 %define llvm_version 19
 # RUST version
-%define rust_version 1.85
+%define rust_version 1.86
 # GCC version
 %define gcc_version 14
 # esbuild version
@@ -100,6 +100,11 @@
 %else
 %bcond_with gtk4_4_19
 %endif
+%if %{pkg_vcmp flac-devel >= 1.5.0}
+%bcond_without flac_1_5
+%else
+%bcond_with flac_1_5
+%endif
 # Package names
 %if %{with is_beta}
 %define chromedriver_name %{name}-chromedriver
@@ -112,7 +117,7 @@
 %global official_build 1

 Name:           chromium%{n_suffix}
-Version:        139.0.7258.154
+Version:        140.0.7339.80
 Release:        0
 Summary:        Google's open source browser project
 License:        BSD-3-Clause AND LGPL-2.1-or-later
@@ -162,6 +167,7 @@ Patch375:       chromium-131-fix-qt-ui.pach
 Patch376:       chromium-135-add_map_droppable.patch
 Patch377:       chromium-139-deterministic.patch
 Patch378:       chromium-139-pdfium-openjpeg-CVE-2025-54874.patch
+Patch379:       chromium-140-keep-__rust_no_alloc_shim_is_unstable.patch
 # conditionally applied patches ppc64le only
 Patch401:       ppc-fedora-add-ppc64-architecture-string.patch
 Patch402:       ppc-fedora-0001-linux-seccomp-bpf-ppc64-glibc-workaround-in-SIGSYS-h.patch
@@ -231,6 +237,8 @@ Patch1010:      chromium-124-system-libxml.patch
 Patch1030:      chromium-134-revert-rust-adler2.patch
 # gtk4 is too old
 Patch1040:      gtk-414.patch
+# flac is too old
+Patch1050:      chromium-140-old-flac.patch
 # end conditionally applied patches
 BuildRequires:  SDL-devel
 BuildRequires:  bison
@@ -240,7 +248,7 @@ BuildRequires:  elfutils
 BuildRequires:  fdupes
 BuildRequires:  flex
 BuildRequires:  git
-BuildRequires:  gn >= 0.20250520
+BuildRequires:  gn >= 0.20250619
 BuildRequires:  gperf
 BuildRequires:  hicolor-icon-theme
 BuildRequires:  golang(API)
@@ -505,6 +513,10 @@ WebDriver is an open source tool for automated testing of webapps across many br
 %patch -p1 -R -P 1040
 %endif

+%if %{without flac_1_5}
+%patch -p1 -P 1050
+%endif
+
 %build
 # esbuild
 rm third_party/devtools-frontend/src/third_party/esbuild/esbuild
@@ -526,9 +538,6 @@ rm -f third_party/node/linux/node-linux-x64/bin/node
 ln -s %{_bindir}/node third_party/node/linux/node-linux-x64/bin/node
 sed -i -e "s@^NODE_VERSION=.*@NODE_VERSION=\"v%{node_version}\"@" third_party/node/update_node_binaries

-rm buildtools/third_party/eu-strip/bin/eu-strip
-ln -s %{_bindir}/eu-strip buildtools/third_party/eu-strip/bin/eu-strip
-
 # python3
 mkdir -p $HOME/bin
 %if 0%{?suse_version} >= 1600
@@ -562,7 +571,6 @@ keeplibs=(
    base/third_party/superfasthash
    base/third_party/symbolize
    base/third_party/xdg_user_dirs
-    buildtools/third_party/eu-strip
    buildtools/third_party/libc++
    buildtools/third_party/libc++abi
    buildtools/third_party/libunwind
@@ -769,7 +777,6 @@ keeplibs=(
    third_party/utf
    third_party/vulkan
    third_party/wayland
-    third_party/wasm_tts_engine
    third_party/webdriver
    third_party/webgpu-cts
    third_party/webrtc
--- a/gcc-enable-lto.patch
+++ b/gcc-enable-lto.patch
@@ -11,8 +11,8 @@ Index: chromium-120.0.6099.18/build/config/BUILDCONFIG.gn
   # Set to true when compiling with the Clang compiler.
   is_clang = current_os != "linux" ||
              (current_cpu != "s390x" && current_cpu != "s390" &&
-@@ -354,6 +356,12 @@ default_compiler_configs = [
-   "//build/config/sanitizers:default_sanitizer_flags",
+@@ -389,6 +389,12 @@
+   "//build/config:feature_flags",
 ]
 
 +if (gcc_lto) {
@@ -28,8 +28,8 @@ Index: chromium-120.0.6099.18/build/config/compiler/BUILD.gn
 ===================================================================
 --- chromium-120.0.6099.18.orig/build/config/compiler/BUILD.gn
 +++ chromium-120.0.6099.18/build/config/compiler/BUILD.gn
-@@ -2342,6 +2342,10 @@ if (is_win) {
-   common_optimize_on_cflags += [ "-fno-math-errno" ]
+@@ -2672,6 +2672,10 @@
+   }
 }
 
 +config("gcc_lto") {
--- a/gtk-414.patch
+++ b/gtk-414.patch
@@ -110,7 +110,7 @@ index efe6321149679..239fbf4ca69a1 100644
 -    GdkTexture* texture = GetTextureFromRenderNode(node);
     size_t nbytes = width * height * sizeof(SkColor);
     SkColor* pixels = reinterpret_cast<SkColor*>(g_malloc(nbytes));
-+    memset(pixels, 0, nbytes);
+    UNSAFE_TODO(memset(pixels, 0, nbytes));
     size_t stride = sizeof(SkColor) * width;
 -    gdk_texture_download(texture, reinterpret_cast<guchar*>(pixels), stride);
 +    if (GdkTexture* texture = GetTextureFromRenderNode(node)) {
@@ -118,7 +118,7 @@ index efe6321149679..239fbf4ca69a1 100644
 +    }
     SkColor fg = GtkStyleContextGetColor(button_context);
     for (int i = 0; i < width * height; ++i) {
-       pixels[i] = SkColorSetA(fg, SkColorGetA(pixels[i]));
+       UNSAFE_TODO(pixels[i]) =
@@ -199,7 +201,7 @@ void CalculateUnscaledButtonSize(
     gfx::Size* button_size,
     gfx::Insets* button_margin) {
--- a/ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
+++ b/ppc-fedora-0001-Add-pregenerated-config-for-libaom-on-ppc64.patch
@@ -2052,7 +2052,7 @@ Index: chromium-134.0.6998.35/third_party/libaom/source/config/linux/ppc64/confi
 +void av1_fwht4x4_c(const int16_t *input, tran_low_t *output, int stride);
 +#define av1_fwht4x4 av1_fwht4x4_c
 +
-+uint32_t av1_get_crc32c_value_c(void *crc_calculator, uint8_t *p, size_t length);
+uint32_t av1_get_crc32c_value_c(void *crc_calculator, const uint8_t *p, size_t length);
 +#define av1_get_crc32c_value av1_get_crc32c_value_c
 +
 +void av1_get_horver_correlation_full_c(const int16_t *diff, int stride, int w, int h, float *hcorr, float *vcorr);
--- a/ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
+++ b/ppc-fedora-0001-sandbox-linux-Update-syscall-helpers-lists-for-ppc64.patch
@@ -16,7 +16,7 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/baseline_policy.
 ===================================================================
 --- chromium-136.0.7103.48.orig/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
 +++ chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/baseline_policy.cc
-@@ -90,7 +90,8 @@ bool IsBaselinePolicyWatched(int sysno)
+@@ -90,7 +90,8 @@
          SyscallSets::IsPrctl(sysno) ||
          SyscallSets::IsProcessGroupOrSession(sysno) ||
 #if defined(__i386__) || \
@@ -26,7 +26,7 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/baseline_policy.
          SyscallSets::IsSocketCall(sysno) ||
 #endif
 #if defined(__arm__)
-@@ -259,7 +259,7 @@
+@@ -254,7 +255,7 @@
 
   // TODO(crbug.com/40528912): should i386 really be in this list?
 #if defined(__i386__) || defined(__x86_64__) || defined(__mips__) || \
@@ -35,7 +35,7 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/baseline_policy.
   if (sysno == __NR_mmap)
     return RestrictMmapFlags();
 #endif
-@@ -340,7 +341,8 @@ ResultExpr EvaluateSyscallImpl(int fs_de
+@@ -336,7 +337,8 @@
   }
 
 #if defined(__i386__) || \
@@ -392,7 +392,7 @@ Index: chromium-136.0.7103.48/sandbox/linux/seccomp-bpf-helpers/syscall_sets.cc
 #endif
     case __NR_write:
@@ -650,11 +651,12 @@
-     case __NR_vmsplice:
+ #endif
 // send* syscalls need their flags filtered.
 #if defined(__arm__) || \
 -    (defined(ARCH_CPU_MIPS_FAMILY) && defined(ARCH_CPU_32_BITS))
--- a/ppc-fedora-0002-regenerate-xnn-buildgn.patch
+++ b/ppc-fedora-0002-regenerate-xnn-buildgn.patch
--- a/ppc-fedora-add-ppc64-architecture-to-extensions.diff
+++ b/ppc-fedora-add-ppc64-architecture-to-extensions.diff
@@ -2,45 +2,26 @@ Index: chromium-128.0.6613.113/chrome/browser/extensions/api/runtime/chrome_runt
 ===================================================================
 --- chromium-128.0.6613.113.orig/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
 +++ chromium-128.0.6613.113/chrome/browser/extensions/api/runtime/chrome_runtime_api_delegate.cc
-@@ -310,6 +310,8 @@
-     info->arch = extensions::api::runtime::PlatformArch::kMips;
-   } else if (strcmp(arch, "mips64el") == 0) {
+@@ -348,6 +348,8 @@
     info->arch = extensions::api::runtime::PlatformArch::kMips64;
+   } else if (strcmp(arch, "riscv64") == 0) {
+     info->arch = extensions::api::runtime::PlatformArch::kRiscv64;
 +  } else if (strcmp(arch, "ppc64") == 0) {
 +    info->arch = extensions::api::runtime::PlatformArch::kPpc64;
   } else {
     NOTREACHED();
   }
-@@ -325,6 +327,8 @@
-     info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kMips;
-   } else if (strcmp(nacl_arch, "mips64") == 0) {
-     info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kMips64;
-+  } else if (strcmp(nacl_arch, "ppc64") == 0) {
-+    info->nacl_arch = extensions::api::runtime::PlatformNaclArch::kPpc64;
-   } else {
-     NOTREACHED();
-   }
 Index: chromium-128.0.6613.113/extensions/common/api/runtime.json
 ===================================================================
 --- chromium-128.0.6613.113.orig/extensions/common/api/runtime.json
 +++ chromium-128.0.6613.113/extensions/common/api/runtime.json
-@@ -98,7 +98,8 @@
-             {"name": "x86-32", "description": "Specifies the processer architecture as x86-32."},
+@@ -99,7 +99,8 @@
             {"name": "x86-64", "description": "Specifies the processer architecture as x86-64."},
             {"name": "mips", "description": "Specifies the processer architecture as mips."},
-            {"name": "mips64", "description": "Specifies the processer architecture as mips64."}
-+            {"name": "mips64", "description": "Specifies the processer architecture as mips64."},
+             {"name": "mips64", "description": "Specifies the processer architecture as mips64."},
+-            {"name": "riscv64", "description": "Specifies the processer architecture as riscv64."}
+            {"name": "riscv64", "description": "Specifies the processer architecture as riscv64."},
 +            {"name": "ppc64", "description": "Specifies the processer architecture as ppc64."}
          ],
         "description": "The machine's processor architecture."
       },
-@@ -111,7 +112,8 @@
-           {"name": "x86-32", "description": "Specifies the native client architecture as x86-32."},
-           {"name": "x86-64", "description": "Specifies the native client architecture as x86-64."},
-           {"name": "mips", "description": "Specifies the native client architecture as mips."},
-          {"name": "mips64", "description": "Specifies the native client architecture as mips64."}
-+          {"name": "mips64", "description": "Specifies the native client architecture as mips64."},
-+          {"name": "ppc64", "description": "Specifies the native client architecture as ppc64."}
-         ]
-       },
-       {
--- a/ppc-fedora-fix-study-crash.patch
+++ b/ppc-fedora-fix-study-crash.patch
@@ -10,9 +10,9 @@
   }
 
   // Enum to pass as optional bool.
--- a/components/variations/service/variations_field_trial_creator_base.cc
-+++ b/components/variations/service/variations_field_trial_creator_base.cc
-@@ -109,6 +109,9 @@
+--- chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:50:52	1.1
+++ chromium-140.0.7339.5/components/variations/service/variations_field_trial_creator.cc	2025/08/12 14:51:32
+@@ -105,6 +105,9 @@
   if (process_arch == "x86") {
     return Study::X86_32;
   }
--- a/ppc-fedora-fix-unknown-warning-option-messages.diff
+++ b/ppc-fedora-fix-unknown-warning-option-messages.diff
@@ -2,15 +2,27 @@ Index: chromium-128.0.6613.113/build/config/compiler/BUILD.gn
 ===================================================================
 --- chromium-128.0.6613.113.orig/build/config/compiler/BUILD.gn
 +++ chromium-128.0.6613.113/build/config/compiler/BUILD.gn
-@@ -1844,7 +1844,7 @@ config("default_warnings") {
- 
-       # -Wno-class-memaccess warns about hash table and vector in blink.
-       # But the violation is intentional.
-      if (!is_nacl) {
-+      if ((!is_nacl) && (current_cpu != "ppc64")) {
-         cflags_cc += [ "-Wno-class-memaccess" ]
-       }
+@@ -1835,12 +1835,16 @@
+       cflags_cc += [
+         # See comment for -Wno-c++11-narrowing.
+         "-Wno-narrowing",
+-
+-        # -Wno-class-memaccess warns about hash table and vector in blink.
+-        # But the violation is intentional.
+-        "-Wno-class-memaccess",
+       ]
 
+      if (current_cpu != "ppc64") {
+        cflags_cc += [
+          # -Wno-class-memaccess warns about hash table and vector in blink.
+          # But the violation is intentional.
+          "-Wno-class-memaccess",
+        ]
+      }
+
+       # -Wunused-local-typedefs is broken in gcc,
+       # https://gcc.gnu.org/bugzilla/show_bug.cgi?id=63872
+       cflags += [ "-Wno-unused-local-typedefs" ]
@@ -1854,7 +1854,9 @@ config("default_warnings") {
 
       # Don't warn about "maybe" uninitialized. Clang doesn't include this