summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Update Chromiumv5.15.13-lts-lgplv5.15.13-lts5.15.13Michael Brüning2023-02-271-0/+0
| | | | | | | | | | | Submodule src/3rdparty bdc50b6a..e48df780: * [Backport] CVE-2023-0933: Integer overflow in PDF * [Backport] CVE-2023-0931: Use after free in Video (2/2) * [Backport] CVE-2023-0931: Use after free in Video (1/2) Task-number: QTBUG-111333 Change-Id: I5574cee09eb47dea80c8a6c993a03a3f3cf6b98b Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update ChromiumPeter Varga2023-02-261-0/+0
| | | | | | | | | | | | | | | | Submodule src/3rdparty f7860adb..4f0704cd: * FIXUP: Mark Node::opcode() and Operator::opcode() as constexpr. * Add checksum to mailbox name in Release build too * [Backport][Windows] Remove unused sidestep intercepts. * [Backport] Mark Node::opcode() and Operator::opcode() as constexpr. Task-number: QTBUG-110504 Task-number: QTBUG-108240 Change-Id: Icbd00244f022ff40644f3aea228ac4b6a5e04eb1 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit f57a146d424290bb69fadd95e7e614715d9c7e6c) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update ChromiumMichael Brüning2023-02-211-0/+0
| | | | | | | | | | | | | | Submodule src/3rdparty d29902af..f7860adb: * [Backport] CVE-2023-0698: Out of bounds read in WebRTC * [Backport] CVE-2023-0472: Use after free in WebRTC * [Backport] Security bug 1406115 * [Backport] Add missing include for std::begin and std::end in SkParseColor.cpp Task-number: QTBUG-111333 Fixes: QTBUG-110265 Fixes: QTBUG-109225 Change-Id: I2ccd8aaea86667b6971d1e4f9d13271e6804eaad Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Force to disable IPC loggingPeter Varga2023-02-201-0/+1
| | | | | | | | | | | | | | | | | | | | | It is enabled by default in Chromium for debug build. See //ipc/features.gni. Disable it for debug build too because it adds and extra SetIPCLoggingEnabled mojo message (see //content/common/child_process.mojom) and it results different mojo message ids for the debug and release binaries. This is undesirable when setting QTWEBENGINEPROCESS_PATH environment variable to use release QtWebEngineProcess with debug browser process or the other way around. The messages and the corresponding ids can be listed by executing the following command in the QtWebEngine build directory: find . -name "*-message-ids.h" | xargs grep -h "constexpr uint32_t" Task-number: QTBUG-110504 Change-Id: I80f24117ae20d02fb53ea482d04bea7a9dcb38c1 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 114c6d0543e1ebe4ec12693b0d462ec05037e3a4)
* Update ChromiumPeter Varga2023-02-101-0/+0
| | | | | | | | | | | | Submodule src/3rdparty 87897ba0..d29902af: * [Backport] Fix more clang deprecated builtins * [Backport] Disable ABSL_HAVE_STD_IS_TRIVIALLY_ASSIGNABLE for clang-cl. * [Backport] Map the absl::is_trivially_* functions to their std impl * FIXUP: Fixes for building with MSVC Fixes: QTBUG-108240 Change-Id: Ia0b0bc47128362019c3dac02fd3579e16c6e3116 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2023-01-241-0/+0
| | | | | | | | | | | | | | Submodule src/3rdparty 40671522..87897ba0: * Revert "[Backport] Security bug 1395604" * [Backport] Security bug 1393384 * [Backport] Security bug 1399424 * [Backport] Security bug 1395604 * [Backport] CVE-2023-0129: Heap buffer overflow in Network Service Task-number: QTBUG-110265 Change-Id: I4fb4de2ff6e72c8a5215e267495f77b968d923f5 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update ChromiumMichael Brüning2023-01-192-1/+1
| | | | | | | | | | | | | Submodule src/3rdparty e0fd3a5d..97a12549: * Drop dependency on content/public/browser in content gpu * [Backport] Security bug 1394382 * [Backport] CVE-2022-4437: Use after free in Mojo IPC * [Backport] CVE-2022-4438: Use after free in Blink Frames * [Backport] CVE-2022-4179: Use after free in Audio Task-number: QTBUG-109225 Change-Id: Icdf29aa0dfa861fd21b07ac4f07f32709d2e5ec5 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Move out GetInProcessGpuShareGroup form content browser clientMichal Klocek2023-01-194-119/+137
| | | | | | | | | | | | | | | | | | Keeping the GetInProcessGpuShareGroup in content browser client creates dependency from gpu_child_thread to content browser, however gn build tree asserts when content/public/gpu depends on content/public/browser as it breaks intended components dependency. This worked so far as required headers in content browser client got generated on time despite of missing dependency. Fix the dependency tree and move the problematic function into the content gpu client. This change moves only code around. Change-Id: Iedcbc8c3c7d1754d1937e6b2c2a470c0e489a597 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Merge remote-tracking branch 'origin/5.15.12' into 5.15Michael Brüning2023-01-122-1/+1
|\ | | | | | | Change-Id: Ic72e5517e260f3b8bcd3b414863fb48e06007cd8
| * Update Chromiumv5.15.12-vxworks-ltsv5.15.12-lts-lgplv5.15.12-lts5.15.12Michael Brüning2022-12-092-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty be349eaf..e0fd3a5d: * Fixup for patch for CVE-2022-3200 on OpenSuse 15.1 * [Backport] CVE-2022-4262: Type Confusion in V8 * Bump V8_PATCH_LEVEL * [Backport] CVE-2022-4174: Type Confusion in V8 * [Backport] CVE-2022-4180: Use after free in Mojo * [Backport] CVE-2022-4181: Use after free in Forms * [Backport] CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools (2/2) * [Backport] Security bug 1378916 * Fixup the patch for CVE-2022-3200 on 87-based / 5.15 * [Backport] CVE-2022-3200: Heap buffer overflow in Internals * [Backport] CVE-2022-3887: Use after free in Web Workers * [Backport] CVE-2022-3890: Heap buffer overflow in Crashpad * [Backport] CVE-2022-3889: Type Confusion in V8 * [Backport] CVE-2022-3885: Use after free in V8 * [Backport] CVE-2022-3445: Use after free in Skia. * [Backport] CVE-2022-3373: Out of bounds write in V8 * Fix building with XCode 14.1 * [Backport] CVE-2022-3046: Use after free in Browser Tag * [Backport] CVE-2022-3446 and CVE-2022-35737 * [Backport] CVE-2022-3304: Use after free in CSS * [Backport] CVE-2022-3201: Insufficient validation of untrusted input in Developer Tools (1/2) * [Backport] Security bug 1356308 * [Backport] CVE-2022-3370: Use after free in Custom Elements * [Backport] Security bugs 1346938 and 1338114 * [Backport] CVE-2022-3199: Use after free in Frames. * [Backport] CVE-2022-3198: Use after free in PDF * [Backport] CVE-2022-3197: Use after free in PDF * [Backport] CVE-2022-3196: Use after free in PDF * [Backport] CVE-2022-3075: Insufficient data validation in Mojo * [Backport] CVE-2022-3040: Use after free in Layout * [Backport] CVE-2022-3041: Use after free in WebSQL * [Backport] CVE-2022-3038: Use after free in Network Service Task-number: QTBUG-109225 Fixes: QTBUG-108207 Fixes: QTBUG-108178 Fixes: QTBUG-108179 Fixes: QTBUG-108180 Change-Id: I5e1ebbe350e67ed888bfb07602d88bfcbecd94df Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* | Fix probabilistic signature schemeMichal Klocek2023-01-031-2/+2
| | | | | | | | | | | | | | | | | | We failed to support pss, which ended up in handshake failures Task-number: QTBUG-109273 Change-Id: I12c50d6a5f2dcf32d47708a958e2fe5a18316986 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 2d77e333eff7605a489ec65600b78e1b49df37c7)
* | Bump version to 5.15.13Tarja Sundqvist2022-12-231-1/+1
| | | | | | | | | | Change-Id: I96fd386811c0e1fc8b03ab73532fdf1c456971b0 Reviewed-by: Jani Heikkinen <jani.heikkinen@qt.io>
* | Recreate response head objects on multiple redirectMichael Brüning2022-12-144-8/+73
|/ | | | | | | | | | The previous response head gets moved when redirecting, which lead to dereferencing a null pointer on the next redirect. Fixes: QTBUG-109357 Change-Id: Iaad1c46b8d4ca9720f1749980a9e06337ca0f3d8 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit c6b2b5d8038b3ec0de6233c1e21df60ade11c81b)
* Bump version to 5.15.12Tarja Sundqvist2022-10-071-1/+1
| | | | | Change-Id: I92bc48089b38b16039ae4109fedcbad2a7ff15ef Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Work-around GNOME bug misidentifying HTML contentv5.15.11-lts5.15.11Allan Sandfeld Jensen2022-09-211-1/+4
| | | | | | | | | | | Correct application/x-extension-html to text/html Fixes: QTBUG-97392 Fixes: QTBUG-106688 Change-Id: I0d65c6950c5ba1504586cf564268463c5d4cd483 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> (cherry picked from commit 84ebd698597cf7a45b5e0967221547c21b1d67e8) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Fix busy waiting on streaming QIODevice'sAllan Sandfeld Jensen2022-09-121-5/+6
| | | | | | | | | | The writable watcher will trigger all the time if we use automatic arming, instead we need to arm it manually when it is needed. Task-number: QTBUG-106461 Change-Id: Ia381db338adb1b1994d1da9b50c6d6ff542ea3e5 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit b30559565cb91501baddea495362101341a0aa22)
* Update ChromiumMichael Brüning2022-08-171-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 7e11d69b..be349eaf: * [Backport] Security bug 1343889 * [Backport] CVE-2022-2610: Insufficient policy enforcement in Background Fetch * [Backport] CVE-2022-2477 : Use after free in Guest View * [Backport] CVE-2022-27406 * [Backport] CVE-2022-27405 (2/2) * [Backport] CVE-2022-27405 (1/2) * [Backport] CVE-2022-27404 * [Backport] Security bug 1287804 * [Backport] CVE-2022-2294: Heap buffer overflow in WebRTC (2/2) * [Backport] CVE-2022-2294: Heap buffer overflow in WebRTC (1/2) * [Backport] CVE-2022-2295: Type Confusion in V8 * [Backport] CVE-2022-2160: Insufficient policy enforcement in DevTools * [Backport] CVE-2022-2162: Insufficient policy enforcement in File System API * [Backport] CVE-2022-2158: Type Confusion in V8 * [Backport] Security bug 1316578 * [Backport] CVE-2022-2008: Out of bounds memory access in WebGL * [Backport] CVE-2022-2010: Out of bounds read in compositing * [Backport] CVE-2022-1854: Use after free in ANGLE. * [Backport] CVE-2022-1857: Insufficient policy enforcement in File System API * [Backport] CVE-2022-1855: Use after free in Messaging * FIXUP: Fix url_utils for QtWebEngine Fixes: QTBUG-105500 Task-number: QTBUG-105499 Change-Id: I718648cb74346f1c7ac49a112378f9e2538e3b72 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Add workaround for un-minimizing QWebEngineView under GnomePeter Varga2022-08-161-0/+4
| | | | | | | | | | | | | | | | Gnome WM doesn't send expose event when minimizing then restoring a window. Presumably, due to the missing expose event the top-level QWebEngineView is not redrawn. As a workaround, force to update RenderWidgetHostViewQtDelegateWidget when shown. The workaround is not needed in 6.4 and later because the issue is fixed by 5d1ef38f9 Create a RWHV delegate in core Fixes: QTBUG-104763 Change-Id: I4761d670d17f6dbbe3e0de82a00179eb7fd7913c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 4a9fc6792fd5b37f1c40c53f47281c8bc74ad9c9) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Build the QtDesigner plugin in all configurationsJoerg Bornemann2022-08-081-1/+0
| | | | | | | | | | | | | The QtDesigner plugin was marked as 'tool_plugin', which restricts its build to release-only, even in debug_and_release builds. This was done to avoid building debug plugins for tools that are only build as release. However, the designer plugins are also loaded when using QUiLoader and thus are not exclusively meant for the designer tool. Task-number: QTBUG-104755 Change-Id: Id87012f57ad06984c7b0f0d318f75ad2c9a596f2 Reviewed-by: Friedemann Kleint <Friedemann.Kleint@qt.io> Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Bump version to 5.15.11Tarja Sundqvist2022-06-291-1/+1
| | | | | | Change-Id: Ib9d15e03f126af102db095150c6b4bff0846ea3b Reviewed-by: Jani Heikkinen <jani.heikkinen@qt.io> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix method checkAllan Sandfeld Jensen2022-06-241-1/+1
| | | | | | | | | Detected by codechecker. Change-Id: I8814180ef6bd591ed3e95fc4b4abff3454f10bdf Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 51faba3af76f4a7c67c769a5ab0be17c9aa54f83) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update ChromiumMichal Klocek2022-06-211-0/+0
| | | | | | | | | | | | | Pulls in following patches: * 7857ff290ab FIXUP: Workaround MSVC2022 ICE in constexpr functions * a7a23ccc69e [Backport] Linux sandbox: ENOSYS for some statx syscalls * ecc2bb74f1f [Backport] CVE-2022-0796: Use after free in Media * 7e11d69b957 Fixup: CVE-2022-0796: Use after free in Media Change-Id: Ic563baee5a7a0c5c0bf95bdbb47a0d92ae6f6e22 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Do not use the native dialog to show the color picker on macOSMichael Brüning2022-06-211-0/+4
| | | | | | | | | | | With the native dialog, there were either problems with the modality when using it asynchronously or with the life cycle when using it synchronously. Not using the native dialog avoids these problems. Task-number: QTBUG-102099 Change-Id: Icb9a9afda48c47558b8e8ecb6d89adc0961d5063 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* FIXUP: Add workaround for unstable gn on macOS in ciMichal Klocek2022-06-201-3/+8
| | | | | | | | | In 5.15 we have sparate coded gn call for qtpdf. This commit amends 41e94fc482eca3e40082c34d8332821a15aefba0 Change-Id: I2b9c7ed1e0c539006fbcac656aa8673a0f00d8b9 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix top level build with no widgetMichal Klocek2022-06-132-2/+2
| | | | | | | | | | | It seems that condition module.widgets is not evaluated in time when configured with "-no-widget" to be picked up by the webengine when doing 'top level' build. Use 'widget' feature instead. Fixes: QTBUG-103618 Change-Id: I881e4ba899d376690984c4866336a03d7dae246c Reviewed-by: Jörg Bornemann <joerg.bornemann@qt.io>
* Fix touch input for widget's delegate for html popupKirill Burtsev2022-06-012-6/+20
| | | | | | | | | | | | | | | | | | | | | | Earlier fix cf8bc1899a introduced the logic, where all system synthesized mouse events are ignored. But after c56169f7a1 this is undesired since for widget with Qt::Popup flag touch input is ignored by QWidgetWindow, and input is expected to be delivered to popup as synthesized mouse event (either synthesized by Qt or for capabable devices by system). So allow system synthesized mouse events to let through for popup. Synthesis by Qt is suppress automatically for accepted touch event, it's only system event are still delivered unconditionally, so still ignore them for widgets impl. Global ignore in core is not needed, since QQuickWidget ignores system synthesized events unconditionally. Fixes: QTBUG-79254 Change-Id: Ie8f55eb8b9c2677d8a98381effb3cb31d9388ac7 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Martin Negyokru <negyokru@inf.u-szeged.hu> (cherry picked from commit 1f6495af6331f5504de9d3f7e43f5202345c7a8c) Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Keep page's zoom level on loading new urlsKirill Burtsev2022-06-018-30/+100
| | | | | | | | | | | | Ammends d236c5a8a3. Zoom level was set as a temporal one, which is invalidated each time when a renderer process or widget are changed (on new navigation, for example), so it needs to be reapplied. Fixes: QTBUG-101030 Change-Id: Iecff9686fbe2b79e99b46f67cab92f66127be085 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 1e27d42a8071532b6cc30a9bcc5f700edc56952a)
* Update ChromiumMichael Brüning2022-05-301-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 0d984c7f..caba2fcb: > Bump V8_PATCH_LEVEL > [Backport] Security bug 1306507 > [Backport] Security bug 1304659 > [Backport] Security bug 1269999 > [Backport] Roll libxml from a46e85f6 to dea91c97 > [Backport] Roll libxml from bfd2f430 to a46e85f6 > [Backport] Roll libxml to bfd2f430 > [Backport] Roll libxml to 7279d236 > [Backport] Roll libxml to f93ca3e1 > [Backport] Security bug 1292905 > [Backport] CVE-2022-1314: Type Confusion in V8 > [Backport] CVE-2022-1310: Use after free in regular expressions > [Backport] CVE-2022-1305: Use after free in storage > [Backport] CVE-2022-1125 > [Backport] Security bug 1280852 > [Backport] Secuirity Bug 1296876 > [Backport] CVE-2022-0978: Use after free in ANGLE > [Backport] CVE-2022-1493: Use after free in Dev Tools > [Backport] CVE-2022-1138: Inappropriate implementation in Web Cursor. > Quick fix for regression in service workers by reverting backports > [Backport] CVE-2022-0797: Out of bounds memory access in Mojo Task-number: QTBUG-103034 Task-number: QTBUG-103038 Task-number: QTBUG-103040 Change-Id: I04e973cb5d9996f8d3590a8fa9a6c47a7b867b87 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit c4aec7f9beca7b15c7733dab9808816fc46962aa) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Fix leak if loader error is seen firstAllan Sandfeld Jensen2022-05-261-1/+6
| | | | | | | | | | For some reason the proxied_loader_receiver can still be bound in this case. Pick-to: 5.15.10 Change-Id: If0bbe181eca5de41e82eebaced412361fe12fb40 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit ffb831d9896dcdd3d469fdbeee407d96d631dbda)
* Add workaround for unstable gn on macOS in ciMichal Klocek2022-05-241-3/+7
| | | | | | | | | | | | | | | | | | | | | | | | | In ci 'gn' can crash making it hard to integrate, if there is high load crashes occur more frequently sometimes even blocking integrations for few days. Limit number of worker threads for gn as this improves situation however increases time for generating ninja files from 2s to 7s. Note this will not prevent crashes however significantly reduces the issue (when running in loop from 1 per ~10min to 1 per ~3days) Compilation with address or thread sanitizer does not lead to meaningful traces. Moreover running gn with sanitizer creates deadlocks for unknown reason every few runs. Current assumptions is that macos vms are unstable as crashes also occur for sscache calls (compiler) and python calls. Set one thread only for macos, in 6.x series this is ci depended but in 5.x series would require coin source changes. Change-Id: I1c488796eb0547eedd20101606f18ed55718e9c2 Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Pass archiver to gn buildMichal Klocek2022-05-241-0/+1
| | | | | | | | | User can override with env variable AR archiver for cross compilation pass archiver from qmake for gn. Fixes: QTBUG-103578 Change-Id: I055d7403ecb829f4b1bbe57ec27c0bca7323484c Reviewed-by: Michael Brüning <michael.bruning@qt.io>
* Fix read-after-free on EGL extensionsAllan Sandfeld Jensen2022-05-244-13/+13
| | | | | | | | | Cache the read extensions as an std::string, since the returned C string may be not be permanent. Change-Id: I856b2b784ab4027da25996b2bf741b30cda10e05 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit fd2fc0d2a86f39d563720563555ca6319f8ab223)
* Fix navigation to non-local URLsAllan Sandfeld Jensen2022-05-053-1/+48
| | | | | | | | | They are passed in another part of the DropItem object. Task-number: QTBUG-102192 Change-Id: If52a88ce2688c25ea0edcc0d1e8f962f2cdd29dd Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io> (cherry picked from commit 742e6786aeb500ef9bc850bf84803d5f388e3927)
* Add support for universal builds for qtwebengine and qtpdfMichal Klocek2022-05-0519-48/+256
| | | | | | | | | | | | | | | As 5.15 is in maintenance mode add basic support for universal build without doing major refactors. The popper implementation should unify build layout instead of adding "isUniversal()" hacks. Add intermediate build files per architecture for Chromium build part and lipo them before final module linking. Task-number: QTBUG-85279 Change-Id: Iebfd7a277b23c1b10c8719041c5959fd9d5e2f06 Reviewed-by: Qt CI Bot <qt_ci_bot@qt-project.org> Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* macOS: Make linker warnings non-fatalMichal Klocek2022-05-051-1/+2
| | | | | | | | Coin exports bogus LIBRARY_PATH which ends up as linker warning. Task-number: COIN-854 Change-Id: I8036b38cdc5677056c14aa428e8b584b9ee6dc10 Reviewed-by: Tor Arne Vestbø <tor.arne.vestbo@qt.io>
* Update ChromiumMichal Klocek2022-05-051-0/+0
| | | | | | | | | | | | | | | | | | | Pulls in following patches: * 019a6b9282e Fix arm64 Skia build for macOS * 368eaa630ba Fixes for universal build * 08b4e141cc1 Fix clang set-but-unused-variable warning * 2082566249c [Backport] On arm64 hosts, set host_cpu to 'arm64', not 'arm'. * f47f334c8ba Fix undefined symbol for universal link * 23e13d55d84 Add crossbuild support for x64/x86 on macos-arm64 * 8a5738c744e Fix mac toolchain python linker script call * d3119947e27 Fix python calls * if1850dc7af Fix cross-compilation arm64->x86_64 * 0d984c7f044 Fix missing dependency for gpu sources Change-Id: Ib6ac1224b2e5e043c8351905066c7c041e308413 Reviewed-by: Tor Arne Vestbø <tor.arne.vestbo@qt.io>
* Enable Apple Silicon supportMichal Klocek2022-05-052-8/+0
| | | | | | | | | | | | | | Reverts "Don't unconditionally log that Apple Silicon is not supported" This reverts commit 3387ca53e550c1a63ed32ddf4f1dc48e61e9fa62. Revert "Skip QtWebEngine and QtPdf if building for Apple Silicon" This reverts commit 1c9785bf7eee038f6f0b8e2d73dcb9588f6d60c1. [ChangeLog] Apple Silicon universal- and cross-builds on macOS are now supported. Change-Id: I01973e3a29def4cd001b5dcb6354d23dbfe15dcd Reviewed-by: Tor Arne Vestbø <tor.arne.vestbo@qt.io>
* Fix cross compilation x86_64->arm64 on macMichal Klocek2022-04-261-0/+3
| | | | | | | | | | | To cross-compile for arm64 we just need target_cpu sysroot is not required. Adding target_cpu will result in "-arch arm64 -mcpu=apple-a12" Change-Id: Id27e0f48309ca1d85728b5f3ca6761d8fd27e3ab Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Tor Arne Vestbø <tor.arne.vestbo@qt.io>
* Bump version to 5.15.10Tarja Sundqvist2022-04-071-1/+1
| | | | | Change-Id: I016e5e60c6be22aa780ea7c4c742d7ff0bb8f0fa Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* CustomDialogs: Make custom input fields readable in dark modePeter Varga2022-04-062-0/+4
| | | | | | | | | Also set hidden characters for custom password field. Change-Id: I8512a6a4215035e21a66aa5564aeb3ba886a900b Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 344cc49f3a7ea64376eb085e1203029a3fa4ba6f) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumAllan Sandfeld Jensen2022-04-031-0/+0
| | | | | | | | | | | | | | Submodule src/3rdparty ab3a3447a..d13d0924c: > [Backport] CVE-2022-0971 > [Backport] CVE-2022-1096 > [Backport] sandbox: build if glibc 2.34+ dynamic stack size is enabled Task-number: QTBUG-102144 Change-Id: I88c5a4b18640e1579c67c874f21c627caabdf991 Reviewed-by: Michal Klocek <michal.klocek@qt.io> Reviewed-by: Tarja Sundqvist <tarja.sundqvist@qt.io> (cherry picked from commit 4f570bd7add21725d66ac8396dcf21917c3a603f) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* CookieBrowser: Make alternating rows readable in dark modePeter Varga2022-03-241-1/+1
| | | | | | | | | Use colors from default QPalette instead of hard-coded values. Change-Id: Ib7cb8ef4bb5ddabc2233ea6596c0527538275963 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 6a9b4e8072f3a2c0d6685100e0c7afb906b2535a) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* QPdfView: scale page rendering according to devicePixelRatioShawn Rutledge2022-03-191-2/+2
| | | | | | | | | | On high-dpi screens we want the rendered pixels to match device pixels. Fixes: QTBUG-86948 Change-Id: I4879adc0aeb001750d42abc1e7d50ca3f11a5fe8 Reviewed-by: Morten Johan Sørvig <morten.sorvig@qt.io> (cherry picked from commit 931e1be35058e43552963510f858766683cbb310) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update documented Chromium versionMichael Brüning2022-03-101-1/+1
| | | | | | | Adjusted security patch versions. Change-Id: Id94c288faee9f16c5b24f7357728ed65b6cf77ea Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2022-03-051-0/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty: 48a205f9..ab3a3447: > [Backport] CVE-2022-0108: Inappropriate implementation in Navigation > [Backport] Dependency for CVE-2022-0108 > Bump V8_PATCH_LEVEL > [Backport] CVE-2022-0111 and CVE-2022-0117 (2/2) > [Backport] CVE-2022-0111 and CVE-2022-0117 (1/2) > [Backport] Dependency for CVE-2022-0111 and CVE-2022-0117 > [Backport] CVE-2022-0310 and CVE-0311: Heap buffer overflow in Task Manager > [Backport] CVE-2022-23852 > [Backport] Security bug 1289394 > [Backport] CVE-2022-0608: Integer overflow in Mojo > [Backport] Security bug 1270014 > [Backport] Security bug 1261415 > [Backport] CVE-2022-0291: Inappropriate implementation in Storage > [Backport] CVE-2022-0293: Use after free in Web packaging > [Backport] CVE-2022-0607: Use after free in GPU > [Backport] CVE-2022-0610: Inappropriate implementation in Gamepad API > [Backport] CVE-2022-0606: Use after free in ANGLE > [Backport] Security bug 1292537 > [Backport] CVE-2022-0609: Use after free in Animation > [Backport] Security bug 1265570 > [Backport] CVE-2022-0116: Inappropriate implementation in Compositing > [Backport] Dependency for CVE-2022-0116 > [Backport] CVE-2022-0102: Type Confusion in V8 > [Backport] Security bug 1256885 > [Backport] CVE-2022-0460: Use after free in Window Dialog > [Backport] CVE-2022-0459: Use after free in Screen Capture > [Backport] CVE-2022-0461: Policy bypass in COOP > [Backport] Security bug 1280743 > [Backport] Security bug 1274113 > [Backport] CVE-2022-0456: Use after free in Web Search > [Backport] CVE-2022-0298: Use after free in Scheduling > [Backport] Security bug 1276331 > [Backport] CVE-2022-0305: Inappropriate implementation in Service Worker API > [Backport] CVE-2022-0306: Heap buffer overflow in PDFium > [Backport] CVE-2022-0289: Use after free in Safe browsing > [Backport] CVE-2022-0100: Heap buffer overflow in Media streams API > [Backport] CVE-2022-0113: Inappropriate implementation in Blink > [Backport] Security bug 1258603 > [Backport] Security bug 1259557 > [Backport] CVE-2022-0103: Use after free in SwiftShader > [Backport] CVE-2022-0109: Inappropriate implementation in Autofill (2/2) > [Backport] CVE-2022-0109: Inappropriate implementation in Autofill (1/2) > [Backport] CVE-2022-0104: Heap buffer overflow in ANGLE > [Backport] Security bug 1268448 > Replace base::ranges::set_union with std::set_union to fix MSVC2017 build Task-number: QTBUG-99721 Task-number: QTBUG-101053 Change-Id: I7a834174f05381b1445ee4b222a4e7e67f13472c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Use IsSameDocument() rather than IsLoadingToDifferentDocument()Benjamin Terrier2022-01-281-1/+1
| | | | | | | | | | | | | | For certain types of redirect navigations (for example, with a non-default useragent set) 'IsLoadingToDifferentDocument()' can be unexpectedly false. In such cases 'navigation_handle->IsSameDocument()' also returns false. Fixes: QTBUG-94924 Change-Id: Ie2c17127e1a00ffc515829526320ba2f71d45af5 Reviewed-by: Kirill Burtsev <kirill.burtsev@qt.io> (cherry picked from commit 8b5e3a46f253cd82dc48bc20c4233f1bf79fcb87) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update module-split for installerSamuli Piippo2022-01-251-6/+9
| | | | | | | | | | | Module-split update to get all QtPdf related files. Fixes: QTBUG-86972 Fixes: QTBUG-100023 Change-Id: I9833fe2be00359c08ca71a2301262473b760df45 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit 2fd5794acbde0280aee59ee05d61ae0910f59dca) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Fix printing PDF filesSzabolcs David2022-01-213-16/+43
| | | | | | | | | | | | Delegate printing task down to the guest WebContents if any is present. Also update PrintWebViewHelperDelegateQt to find the plugin element properly for printing. Task-number: QTBUG-98941 Change-Id: I81004a2275e0870a17565af527b1450472afb24b Reviewed-by: Michael Brüning <michael.bruning@qt.io> (cherry picked from commit 455efe7ef204c6cd8de72b9b1f922f1681f58589) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Do not override signal handlersAllan Sandfeld Jensen2022-01-191-0/+1
| | | | | | | | | | We used to have this, but it got dropped at some point in an adaptions. Fixes: QTBUG-99263 Change-Id: I3bf86a1b42edca0cd792723c85d7dcb7877fea37 Reviewed-by: Michal Klocek <michal.klocek@qt.io> (cherry picked from commit fbaab46becbf5ea063a8b4a01abf8cd1d4a1725d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update ChromiumAllan Sandfeld Jensen2022-01-191-0/+0
| | | | | | | | | Submodule src/3rdparty 0ad281437..48a205f9e: > Do not overwrite signal handlers in the browser process. > [Backport] Copy 'name_' member during StyleRuleProperty::Copy Change-Id: Ifd4b0c0d130d024e6b97f6898180d9b39cf19814 Reviewed-by: Michael Brüning <michael.bruning@qt.io>