summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* CMake: Add comments on how macOS/iOS linking works6.8Alexandru Croitor2 days1-6/+71
| | | | | | | | | | | | | The machinery is quite complicated, so adding comments that explain it helps when looking at it in the future. Task-number: QTBUG-116619 Change-Id: Ic3ee295f8e0f46438e2cfa6f04f921ecac5a5dee Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io> (cherry picked from commit 0d265a75eeee40fa982f5ac67c8062c57146ed6d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit fec68365ec80422881538f55e9f873c72af05afb) (cherry picked from commit 0d283d47a96fd0a7776335885f74f9fd805aefad)
* Fix link for documaentationEren Bursali6 days1-1/+1
| | | | | | | | | | Fixing link for https://doc-snapshots.qt.io/qt6-dev/qwebengineglobalsettingsdnsmode.html Change-Id: I78d9f78741ee1d750f2ec41a9e9329afadf2a787 Reviewed-by: Moss Heim <moss.heim@qt.io> (cherry picked from commit 654975edafe0b54a01057789dbf6186127d9e3ed) Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update ChromiumMichal Klocek8 days3-2/+2
| | | | | | | | | Submodule src/3rdparty a8a45eb9..197d5bc5: * [backport] CVE-2025-13224 Fixes: QTBUG-142340 Change-Id: Ibf9be7e561a8101be06ff73b4b0b380ff1245135 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Release with bundled libxml2Michal Klocek13 days1-3/+8
| | | | | | | | | | | | | | | | As libxml 2.14 breaks binary but not source compatibility the binaries from qt installer might not work out of the box on distros which only have newer libxml. For time being release with bundled libxml2 2.12 to favor user experience over extra bundled lib. Fixes: QTBUG-136637 Change-Id: I72d14cfdad3deb51201bfec0ebf98b23e8337a40 Reviewed-by: Jani Heikkinen <jani.heikkinen@qt.io> (cherry picked from commit cef684f2cb69509ad0a863f60e9f46154dc68d85) Reviewed-by: Simo Fält <simo.falt@qt.io>
* Update ChromiumMichal Klocek2025-12-023-2/+2
| | | | | | | | | Submodule src/3rdparty a19b7521..a8a45eb9: * [Backport] CVE-2025-13042: Inappropriate implementation in V8 Fixes: QTBUG-142339 Change-Id: Ic6688eb0846c9aa74d7ad99c012c2c9befdc111d Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Speculative deadlock fix in graphics resource clean-upMichal Klocek2025-12-021-33/+48
| | | | | | | | | | | | | Do not move compositor handle, make a clean job a compositor observer instead. This prevents the deadlock. Fixes: QTBUG-141739 Fixes: QTBUG-141214 Change-Id: Ic51ce467ec65ae3cb1ae556328cf8eb171fe59a0 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> (cherry picked from commit 14c000f45324a64afdc922d138ac2ab2cdbd4622) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Fix Quick popup window positioning under X11Peter Varga2025-12-021-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | If the popup window has the Qt::Dialog flag, some window managers may try to resize and move the popup after it becomes visible. This can lead to a blinking popup or even worse, it can cause a loop that continuously moves the popup window. Replace Qt::Tool flag with Qt::Popup to get rid of the Qt::Dialog flag but keep popup as popup. Note on Wayland Qt:Tool is xdg toplevel not a 'popup' neither 'grabbing popup' and it creates shell surface. This means it will get random position on the screen. Note this tricky issue as we already changed that several times both for widgets and quick due to different reasons (see 1390979a, 2f720836, 58467ed19, 7e7dd2625, c56169f7a1) Fixes: QTBUG-140321 Task-number: QTBUG-132794 Task-number: QTBUG-138747 Change-Id: I8c3a94519008455fac2d8ab4c3bf34d860e2475b Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> (cherry picked from commit 65ea28e7204eaeb39588a33cfc2f69c48951aa6a) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Make html comoboxes great again (2/2)Michal Klocek2025-12-024-38/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch is band-aid patch to handle QQuickWebEngineView transformations like scaling and rotation. Before this patch we used mapToGlobal to get viewGeometry however if the item is transformed by rotation and scaling the mapToGlobal will return something not expected by Chromium. Imagine: --------- ------- | aaaaa | | aaaa| | bbbbb | => rotates 90 => | bbbb| | ccccc | | cccc| --------- | | ------- So Chromium still 'thinks' that content is displayed horizontally and just window geometry changed. Moreover, mapToGlobal for rect QRectF(tl,rb) when this is rotated by 90 degree will return QRectF(tr,bl).nomralized() in global coordinates. This is not correct geometry. As band-aid solution for transform case, go with fixed view geometry of QRect(0,0,widith(),hight()) This will allow to Chromium get untransformed popup position, which we later transform in delegate. Fix and simplify transformation calculations in QQuickWindow delegate using just global screen coordinates. Note having fixed view geometry will have side effect like accessibility mappings broken or screen edge detection not working (if dropdown comobox can not be displayed due to screen border it is simply moved over the combobox filed) Therefore, this is just band-aid solution, which covers anyway rare use case of doing the QQuickWebview transformation within the scene. Tested with openbox, weston, mutter-wayland, mutter-xwayland. Change-Id: I3c2d662ccd093793da6b5e192d79c9e22e451789 Reviewed-by: Michael Brüning <michael.bruning@qt.io> (cherry picked from commit 452e0aaed82ee01833455ef4616fb59a9fc7fc2b) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Make html comoboxes great again (1/2)Michal Klocek2025-12-022-18/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During transition from Qt5 to Qt6, we moved some code to core and in 5d1ef38f9 we moved RWHV delegate to core. Before that change we used to feed chromium with geometry and frame geometry of delegated window and later in case of qquickwindow based delegate we did dome extra 'fixup' calculations to cover the fact that using geometry() for view geometry in screen coordinates did not include actual item delegate offset from the qml scene. However after the change we use simply mapToGlobal within the delegate for view geometry which already knows exact global coordinates for the item within the qml scene. In e2185036 we have fix for accessibility layout, however local coordinate mappings makes no sense as it will always return "0". this->mapFromItem(this,QPoint(0,0)) Use simply global coordinates here, and remove obsolete "fixup" calculation for offset in qquickwindow delegate. Note this patch does not care about rotated qquickwebengineview. The band-aid patch for that is in followup. Task-number: QTBUG-135040 Fixes: QTBUG-140321 Fixes: QTBUG-139709 Change-Id: I01266b42bc74120e39e2703db78c2b9c3548572f Reviewed-by: Michael Brüning <michael.bruning@qt.io> Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> (cherry picked from commit 68322bd57bd790d609e85599d3c524c9650e31c2) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Notify about global mapping changes of QQuickWebEngineViewMichal Klocek2025-12-023-10/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Chromium needs to be aware of view geometry changes. We do the sync in visualPropertiesChanged call, which in turn is called from item geometryChanged and itemChanged handlers. However, this approach is not sufficient to track global geometry changes as it only covers case where geometry change is local to item's parent. Therefore, we need watch the entire parent hierarchy to correctly handle global geometry change notifications. Note this issue only affects webenginequick as rwhv can have offset from the scene due to explicit position or anchoring within other items. Moreover, anchoring of child item can mean making offset in parent item. Add logic to track offset changes of parent items. Use 'polish' accumulate required notification and do visualPropertiesChanged() in updatePolish() call. Fixes: QTBUG-141476 Change-Id: Ia35a6f243624cb06b6b45f76abf8ba544790e2c0 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> (cherry picked from commit 85be04668e0d4f176ae44da772b9da58dff388e5) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Update ChromiumMichael Brüning2025-11-171-0/+0
| | | | | | | | | | Submodule src/3rdparty 31fb6939..a19b7521: * [Backport] Security bug 460017370 * [Backport] Dependency for security bug 460017370 * [fixup] [Backport] CVE-2025-11460: Use after free in Storage Change-Id: Ia06b00f78d93bf667e7475442f3285c0908a14f7 Reviewed-by: Moss Heim <moss.heim@qt.io>
* NativeSkiaOutputDeviceOpenGL: Fix confusing warning about Vulkan texturePeter Varga2025-11-102-2/+7
| | | | | | | | | | | | | | | | | | | Previously, if dma_buf was not supported or allocating a GBM buffer object failed, we tried to fall back to a Vulkan texture, assuming the failure was due to GBM being disabled. However, this fallback would also fail because a Vulkan texture could not be generated, resulting in the confusing warning: "Backend texture is not a Vulkan texture." This change ensures that the warning is only issued if Chromium actually generated the texture using Vulkan, avoiding false fallback warnings. Change-Id: I8866120e6641a1dce846b26f707dc04b489893a7 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Moss Heim <moss.heim@qt.io> (cherry picked from commit 9f07c957de0a587a1b8b02a3f182dbbb092ddf1d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 2fbae4826a991ccbeabcf5ba6557499f52de548f)
* Update ChromiumMichael Brüning2025-11-073-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 6bc7cda4..31fb6939: * [Backport] CVE-2025-12726: Inappropriate implementation in Views (3/3) * [Backport] CVE-2025-12726: Inappropriate implementation in Views (2/3) * [Backport] CVE-2025-12726: Inappropriate implementation in Views (1/3) * [Backport] Dependency for CVE-2025-12726 / Security bug 402791076 * [fixup] [Backport] CVE-2025-6021 * FIXUP: [Backport] CVE-2025-12441: Out of bounds read in V8 * CVE-2025-12429: Inappropriate implementation in V8 * [Backport] CVE-2025-12438: Use after free in Ozone * [Backport] CVE-2025-12441: Out of bounds read in V8 * [Backport] CVE-2025-12433: Inappropriate implementation in V8 * [Backport] CVE-2025-12443: Out of bounds read in WebXR * Fixup: [Backport] CVE-2025-11756: Use after free in Safe Browsing * [Backport] CVE-2025-6021 * [Backport] IWYU modules/desktop_capture and modules/video_capture for PipeWire * [Backport] IWYU modules/video_capture Fixes: QTBUG-141597 Fixes: QTBUG-141749 Change-Id: Ic7d14ac69b1d88263c582ace5c525c4bfab876fb Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update ChromiumMichael Brüning2025-10-273-2/+2
| | | | | | | | | | | | | Submodule src/3rdparty c9acb79d..6bc7cda4: * ANGLE: Don't hard-code toolchain path for metallib tool * ANGLE: Don't hard-code toolchain path for metal tool * [Backport] CVE-2025-24928 * [Backport] CVE-2025-11756: Use after free in Safe Browsing * [fixup][backport] CVE-2025-8582: Insufficient validation of ... Fixes: QTBUG-141409 Change-Id: I534f5b8f79da8a11cbb6ccf5a039a41ca17c69d7 Reviewed-by: Moss Heim <moss.heim@qt.io>
* Adapt to reuse version 6Lucie Gérard2025-10-201-0/+2
| | | | | | | | | Task-number: QTBUG-140916 Change-Id: I3b356c53fa485c1b253841bfad3d8e0568c18679 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io> (cherry picked from commit b90fe93da2f8ed2004239202c26d42f830c5c690) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 54297aa3eb1a34fdaf4bf8560f7d67b792901e90)
* Update ChromiumMichal Klocek2025-10-143-2/+2
| | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 3257cebb..c9acb79d: * [Backport] CVE-2025-11460: Use after free in Storage * [Backport] CVE-2025-11458: Heap buffer overflow in Sync * [Backport] CVE-2025-11216: Inappropriate implementation in Storage * [Backport] CVE-2025-11207: Side-channel information leakage in Storage (2/2) * [Backport] CVE-2025-11207: Side-channel information leakage in Storage (1/2) * [Backport] Security bug 435068768 * [Backport] Security bug 439058241 * [Backport] Security bug 441427753 * [Backport] CVE-2025-6965 / Security bug 434161973 * [Backport] Security bug 435225528 * [Backport] Security bug 440866282 * [Backport] CVE-2025-11206: Heap buffer overflow in Video * [Backport] Disable NSAutoFillHeuristicController on macOS 26 * [Backport] Roll src/third_party/ffmpeg/ 01f23648c..dcdd0fa51 (552 commits) Fixes: QTBUG-140867 Fixes: QTBUG-140913 Change-Id: Ie1e4c51f8682a2befaec516d41a3dfa73f7d2e34 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Consider viewport coordinates for mouse eventsSakaria Pouke2025-10-141-2/+4
| | | | | | | | | | Fixes: QTBUG-131443 Change-Id: I483be0d0ed6002ab334d4992169c66d086551841 Reviewed-by: Sami Varanka <sami.varanka@qt.io> Reviewed-by: Tomi Korpipää <tomi.korpipaa@qt.io> (cherry picked from commit d7d9b7b94b0ca1e8d79414e9161fe0da468eaa35) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 6f725fc9dfa3bbef0285eab6cb4108c19a38bfb0)
* Fix typos in coreMarcell Brauner2025-10-1316-23/+23
| | | | | | | | | Change-Id: Ia8375615ade18fa1fea3bb42fb6dc560398166d3 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Kaloyan Chehlarski <kaloyan.chehlarski@qt.io> (cherry picked from commit e4792cbbab8e66981c79694a4eb99e34af1f6410) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 1e958e3526af70e8d39d04a22743865295326e1e)
* Delete stale accessibility QObjectsMoss Heim2025-10-101-0/+2
| | | | | | | | | | | | | | | These objects are often parented to the QWebEngineView, but not cleaned up when changing pages, resulting in increasing memory usage over time. It should be safe to delete them after the associated accessibility node is deleted. Fixes: QTBUG-140234 Change-Id: I215ca01aca10873b5ce86224d98907d41e6c8991 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> Reviewed-by: Kaloyan Chehlarski <kaloyan.chehlarski@qt.io> (cherry picked from commit 9fad93e7f8215027ad6f2076be558e9386f6b8f1) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit ed64469d85347ce29fc7764534d014e86c34b860)
* CMake: Fix ld: library 'GnObject_Pdf_Debug' not found errorAlexandru Croitor2025-10-101-3/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When building a single-arch static build of QtPdf on macOS, and linking to it in a user project with qmake, one got the following error: ld: library 'GnObject_Pdf_Debug' not found This happened because the build system created an IMPORTED OBJECT library called GnObject_Pdf_Debug that is linked to the static QtPdf target via target_link_libraries(PRIVATE). When linking any dependency privately to a static library, CMake implicitly also populates its INTERFACE_LINK_LIBRARIES with a $<LINK_ONLY:GnObject_Pdf_Debug> dependency. This in turn got processed by qt_generate_prl_file() -> __qt_internal_walk_libs() which added a plain -lGnObject_Pdf_Debug to the .prl file of the static QtPdf library, even though we install no such library. Make sure we wrap the GnObject_* dependency in a QT_SKIP_WALK_LIBS_PROCESSING genex, so that __qt_internal_walk_libs skips adding it to the .prl file. Wrap the dependency also in a BUILD_INTERFACE genex, so that it's not exported in the PdfTargets.cmake file either, because the relevant object file is already included in the static QtPdf library. Fixes: QTBUG-140032 Change-Id: Ie13e4e473f973564fe7a7f284a646edb18264dc0 Reviewed-by: Alexey Edelev <alexey.edelev@qt.io> (cherry picked from commit a9bb185ad2bfe9b8bba9421d287b85bb90be08af) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 96bbf3f83dd324149bf79212da9001a32e2922b0)
* CMake: add_intermediate_object - ensure macos deployment targetTim Blechmann2025-10-091-0/+11
| | | | | | | | | | | | | | | | | | add_intermediate_object is used to merge multiple object files into a new object file. The original object files are compiled with the correct minimum deployment target, but the combined object file does not have its minos field specified. This can cause linker warnings when linking this object file into applications. We now pass -mmacosx-version-min to clang++ -r explicitly to ensure that the minos field is correctly populated. Fixes: QTBUG-140029 Change-Id: I9df090d0140a1d881979d4a105ee9f597be6f3e1 Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io> (cherry picked from commit dfcf502e3479844cb61b333eff6d900e07f38cce) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit f237c431a7b8cc7c4efc7a949ca3167ac4069186)
* Fix user agent override when intercepting a redirectKaloyan Chehlarski2025-10-021-1/+7
| | | | | | | | | | | | | | | | When a redirect is followed, Chromium will inject the profile's default user agent string into the list of headers to modify for the redirect request. This effectively clears any user-provided user agent overrides. This change removes the User-Agent header from the list of modified headers, allowing the user-supplied one to be used instead. Fixes: QTBUG-140515 Change-Id: I444a286cc5ca728a2d8abcd51eee69cf95a4e543 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit ec2ad7c978ea86b0c03d8b0987f7421da40d75ff) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit ddc62112f1b17f07cf06b6bf8e725dfd035b9021)
* PdfSearchModel: change "not found in context" warning to qCDebugShawn Rutledge2025-09-261-1/+1
| | | | | | | | | | | It's noisy in practice. Fixes: QTBUG-122766 Change-Id: I9c03ee6849568f6f52d55a0072becf11b9f8a50d Reviewed-by: Friedemann Kleint <Friedemann.Kleint@qt.io> (cherry picked from commit 8f05eaa6a91e12418e4268211d2e2c6052f52e3f) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit bbca500604464e1742c0dfcee5fcb65696598ccf)
* CRA mark src/core [1/6]Kaloyan Chehlarski2025-09-2624-0/+24
| | | | | | | | | | QUIP: 23 Fixes: QTBUG-138726 Change-Id: Ieee01149fd953d712127b4e53e5056b47910a441 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit ae9e9aab164006a3b6e34b9640f7c3c5a68173a4) (cherry picked from commit 8cdbe03f7882a38e712dd45b0c96852979475343) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* CRA mark src/core [3/6]Kaloyan Chehlarski2025-09-2627-0/+28
| | | | | | | | | | QUIP: 23 Fixes: QTBUG-138728 Change-Id: I36a12aaaf01cd3c3e763c86d9065efae2b6ccbae Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit bad281f1bd65bb4becdd7fa0ddcd4b1d190ac430) (cherry picked from commit 33d1c2511b6f2a8485cfee233bfe6d1d3df850e6) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* CRA mark src/core [4/6]Kaloyan Chehlarski2025-09-2627-0/+27
| | | | | | | | | | QUIP: 23 Fixes: QTBUG-138729 Change-Id: If91f79fe9d2f8ef7278c99794ea74bc0ceb71d1e Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit d7de61a253e77ecf3239755c2244fbc10093b06a) (cherry picked from commit 07ff05f5f0f06342e1ff2cf50cef109b0914fe49) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* CRA mark src/core [5/6]Kaloyan Chehlarski2025-09-2623-0/+24
| | | | | | | | | | QUIP: 23 Fixes: QTBUG-138730 Change-Id: Iaff7ccc266691b16f403cbf02575aea8c287bcb0 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 87c8958e766a870ae2458f7f0e8b947a225e5d1f) (cherry picked from commit 2bc809f3a08a7df6c3dd2b863c47d7571cac972d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* CRA mark src/core [6/6]Kaloyan Chehlarski2025-09-2625-0/+25
| | | | | | | | | | QUIP: 23 Fixes: QTBUG-138731 Change-Id: I5ed7d15332dea5e26e84b8f82339c0ba537ba660 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit eb100fdbddf65f98bb1da4b83a70307d0191a594) (cherry picked from commit b59517735a1ee6ac9e0c67309cae765d04127cd4) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
* Update ChromiumMichael Brüning2025-09-183-2/+2
| | | | | | | | | | | | | | | Submodule src/3rdparty 71a06c58..c6fb70d8: * [Backport] CVE-2025-10502: Heap buffer overflow in ANGLE * [Backport] Dependency for CVE-2025-10502 * [Backport] CVE-2025-10501: Use after free in WebRTC * [Backport] CVE-2025-10500: Use after free in Dawn * [Backport] Security bug 445380761 * [Backport] perfetto: tp: prepend to path when generating tp table headers * minibgm: fix missing include libgen.h Task-number: QTBUG-140231 Change-Id: Ib3768a1f694246a11d6063ada45f64c5b9e64a6f Reviewed-by: Moss Heim <moss.heim@qt.io>
* Fallback to software rendering if Ozone X11 is not availableMarcell Brauner2025-09-171-0/+8
| | | | | | | | | | | | | If certain X11 libraries are missing then the BUILDFLAG(IS_OZONE_X11) is false. In this case, desktop-gl won't get added to the allowed GL implementations and the application crashes. To circumvent this, add a warning message and fallback to software rendering. Change-Id: I514074fff23f5b7dfeb95b0cce1d05f10912edff Reviewed-by: Moss Heim <moss.heim@qt.io> Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
* Fix typo in --disable-gpuMarcell Brauner2025-09-171-1/+1
| | | | | | | | | | Change-Id: Ifffe48cce9d0acb85c5aca398894c2d359626672 Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu> Reviewed-by: Moss Heim <moss.heim@qt.io> (cherry picked from commit 56f2cf847b2eca28bba698041d47d5432f3c624d) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 57857d062d6ddb0ae26c142ff076819bf236b3bd) (cherry picked from commit 97702883160b8533ae13ac07360e5df367dc960a)
* CRA mark src/core/apiMoss Heim2025-09-1684-0/+84
| | | | | | | | | | | | | QUIP: 23 Fixes: QTBUG-138720 Change-Id: I9c064bef911e36c12553fc6cebb7408fb02bcc0b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 842e0732233b677ba8bc093c6a11a215bf8a8973) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit c7d7a7d56c54029fee594841961668157bd9bf26) Reviewed-by: Moss Heim <moss.heim@qt.io> (cherry picked from commit c6366056016474e9b10a0ee7eb7d4977054e8133) Reviewed-by: Michal Klocek <michal.klocek@qt.io>
* Update ChromiumMichael Brüning2025-09-123-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 7988ac09..71a06c58: * [Backport] CVE-2025-10201: Inappropriate implementation in Mojo * [Backport] CVE-2025-10200: Use after free in Serviceworker * [backport] CVE-2025-9866 * [fixup][gcc-10] Fix compilation issue with gcc-10 * [Backport] CVE-2025-8901: Out of bounds write in ANGLE * [Backport] CVE-2025-8881: Inappropriate implementation in File Picker * [Backport] CVE-2025-8880: Race in V8 * [Backport] CVE-2025-8879: Heap buffer overflow in libaom * [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (2/2) * [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (1/2) * [Backport] CVE-2025-8580: Inappropriate implementation in Filesystems * [Backport] Security bug 421544815 * [Backport] CVE-2025-8576: Use after free in Extensions * [Backport] CVE-2025-8582: Insufficient validation of untrusted input in DOM Fixes: QTBUG-138967 Fixes: QTBUG-139301 Fixes: QTBUG-139399 Fixes: QTBUG-140101 Fixes: QTBUG-140102 Change-Id: Ic4b9251b84e20994f6361f5255681cf6047c28f2 Reviewed-by: Moss Heim <moss.heim@qt.io>
* Update ChromiumMichael Brüning2025-09-123-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Submodule src/3rdparty 1cacccf9..7988ac09: * (HEAD) [Backport] Security bug 431828026 * [Backport] Security bug 431668129 * [Backport] Security bug 432661300 * [Backport] Security bug 428177287 * [Backport] CVE-2025-7657: Use after free in WebRTC * [Backport] Security bug 428754691 * [Backport] CVE-2025-7656: Integer overflow in V8 * [Backport] Security bug 427316421 * [fixup] Adapt favicon and history component for WebEngine * [Backport] [zlib][build] Remove fdopen #defines in zutil.h * [Backport][libpng] Apply 893b811 from upstream to fix macro issue * [fixup] [Backport] Security bug 420885124 * Fix compilation in ci with lastest security patches * [Backport] CVE-2025-6554: Type Confusion in V8 * [Backport] Security bug 415397143 * [Backport] Security bug 420885124 * [Backport] Dependency for security bug 42088512 * Fix gcc 12 build with bookworm * [fixup] Reinstate jumbo-builds * [Backport] Security bug 416535738 * [Backport] CVE-2025-6191: Integer overflow in V8 Fixes: QTBUG-138842 Fixes: QTBUG-138843 Fixes: QTBUG-138844 Fixes: QTBUG-138217 Fixes: QTBUG-138218 Fixes: QTBUG-137881 Change-Id: Ie12720b006a7bd54acc28b8a1cca95e3aefa67fa Reviewed-by: Moss Heim <moss.heim@qt.io>
* Fix accessibility for tablesKaloyan Chehlarski2025-09-103-44/+211
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change modifies a few of the table-related methods inside BrowserAccessibilityInterface to use corresponding specialty methods from Chromium's a11y implementation, instead of relying on manually extracted attributes. This fixes table contents always being reported as 'blank' to screen readers. The kRowHeader and kColumnHeader roles are now exposed as Cell to Qt (and thus, to the system), which is consistent with what Chromium does; exposing them to Qt as QAccessible::Row/ColumnHeader causes some issues when navigating with VoiceOver on macOS. The caption() method is now implemented as well. macOS-only implementations of certain platform methods related to tables have been copied over as well. This fixes some crashes when iterating through children. As a drive-by, this also fixes a rare a11y-related crash when in the middle of deleting a page. Fixes: QTBUG-136622 Change-Id: I157bece10d3c2261722d7f70e2b879c1d462b137 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 80547b9d786ee4773cabe9c610a5ad60569cf61a) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 95593639d124f7adf62418c2a628aacc5284ef74) (cherry picked from commit 74202ef3d82ee433e08f593093293a9efd928f42)
* Attempt to stabilize tst_QWebEnginePage::mouseMovementPropertiesAllan Sandfeld Jensen2025-08-291-0/+1
| | | | | | | | | Ensure exposure before requesting activation Change-Id: I488e01098b06c4cdc7ead2841548c19e944bab8d Reviewed-by: Moss Heim <moss.heim@qt.io> (cherry picked from commit 893e57b390e0fee539abb033f792144a2fb398a4) Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
* Remove unnecessary QQmlEngine usageAllan Sandfeld Jensen2025-08-2910-173/+19
| | | | | | | | | | | | | Reverts most of f5fbc34fc16fc9c6e7f7e8bbbf60f5b343b9466d, relying on better implicit QML conversion since. Fixes: QTBUG-138881 Change-Id: Ic23579e421f737b9a4d85c7e4f1a4019323c4be9 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io> (cherry picked from commit b02b9fb4346bd99164256f43d02b4bd85637b11b) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 90c35756dd9ee90a23656a8235b86db111d31365) (cherry picked from commit 8523b4febbad54e47f55b6e2343dc9b3d041bf85)
* CRA mark src/core/custom_handlersKaloyan Chehlarski2025-08-257-0/+8
| | | | | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Change-Id: Ic774a8415afdc198aab88f19e7f6b860ec766728 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 6f0cfb5ad9fd121b5335863c88e1dfa12c18a1eb) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit cb0734d305a75c1066a9fc9dd464e6d0fcae06b3) (cherry picked from commit c121ab1632461beacff53f8ddf38085d22edd057)
* CRA mark src/webenginewidgetsMoss Heim2025-08-2416-0/+16
| | | | | | | | | | | QUIP: 23 Fixes: QTBUG-138714 Change-Id: I330d87a2441a9256965892b0078a9d6d23f9f60c Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 99eb5738b18dbcf1b27542a28f66611d78cd3133) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 1316ef37495a6b4844251de662dbb810830e05bf) (cherry picked from commit 54af90a346d07113abe514e510d244f874d67a9a)
* CRA mark src/core/toolsKaloyan Chehlarski2025-08-241-0/+1
| | | | | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Change-Id: I2cebf8b03edc00bc6fb1e7c034311cb9fe763139 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 625d13f5835e541a1867df098155c588d69b4215) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit e2eeba8e95db9d9ce6677ce1bdae6d7ec937aaaf) (cherry picked from commit 9d914918e4691389b0b12fc8771c71140b4b1343)
* Fix narrowing conversions seen on 32bit armKhem Raj2025-08-191-1/+1
| | | | | | | | | | | | | | | | | This issue is seen with clang-19 when compiling for arm32 make clang-19 happier with -Wc++11-narrowing Fixes native_skia_output_device_opengl.cpp:292:47: error: non-constant-expression cannot be narrowed from type ' ↪ uint32_t' (aka 'unsigned int') to 'EGLAttrib' (aka 'int') in initializer list [-Wc++11-narrowing] 292 | EGL_DMA_BUF_PLANE0_PITCH_EXT, nativePixmap->GetDmaBufPitch(0), Change-Id: I95ba1ab0a37218b6d05324df563efba6d5c39ba2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit f94d2a539c3189b086615749cfde65ca2058e04c) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 8bc191ff6e879cb01ae4f2a2fc719f5b9b3eed4e) (cherry picked from commit 2bb6c8aee1081ff4656d46bab1b8d9458a58e944)
* CMake: Make sure headers are synced on doing sandbox build on windowsMichal Klocek2025-08-191-0/+1
| | | | | | | | | | | | | | | | Fix build race condition, as file sandbox_win.cpp includes global header, make sure headers are in sync before trying to build static sandbox lib. Build log error on bug report. This amends e372bb3dad121465d61cc15de18c06c85f938072. Fixes: QTBUG-138159 Change-Id: Iab5be9082a31b56aece926a0267e0a7378635996 Reviewed-by: Alexey Edelev <alexey.edelev@qt.io> (cherry picked from commit 73a8a4ee569515c094cce0d13d0c82f463eae1a1) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 4de77b0c6d6b9ab8425e87af19d5d0579829d587) (cherry picked from commit f51c34d68be155373b80515aa92bd7094860efaa)
* CRA mark src/core/printingKaloyan Chehlarski2025-08-1812-0/+12
| | | | | | | | | | | QUIP: 23 Task-number: QTBUG-138725 Change-Id: I53074540f4340b1e8b20de5fa3c90f75db45547b Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 8bae6acaf36bb00364c645ee522a1231fcb16251) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit ec1a119fa96e162c9475f97d142d1c05e010f9aa) (cherry picked from commit ae74f985d8dd4eebcfbc85ffe7e93c6eeece4881)
* Fix case of QML webEngineScript documentationAllan Sandfeld Jensen2025-08-181-9/+9
| | | | | | | | | Change-Id: Ia7e65f9050a1e57a3a2c7da69088e68fc7874ef1 Reviewed-by: Ulf Hermann <ulf.hermann@qt.io> (cherry picked from commit 1eb2cb02f7ebdfc15a0d2ddc7837d4cffe073006) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 0aa6934d4cbd9158647082798207be82c5e5bda4) (cherry picked from commit f25b5c1c31dcc6c6d2bdefaf823b18c817306a4e)
* Fix accessibility for <p> tags with Windows NarratorKaloyan Chehlarski2025-08-172-4/+4
| | | | | | | | | | | | | | | | | | | QAccessible::Paragraph maps to a Text control on Windows, which causes Narrator to completely ignore its child nodes. Since even a simple <p>Content</p> generates two nodes, a nameless parent kParagraph and a named child kStaticText, the result is that Narrator will see a Text node with no name, and simply read "text". This change maps the kParagraph role to QAccessible::Grouping, which allows Narrator to see its child nodes and read their contents aloud. Fixes: QTBUG-134055 Change-Id: I96d4262bd4149f1dec50d47491263d0b022d4b83 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit 245e1dacc930f52e8d6f09178e3942c33e785b10) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 265718fe80b5cf67f63d55a9328b9d12d4a1ebcd) (cherry picked from commit 96bafc4c768f01e6dff5f42d54127dac1cbd162a)
* CRA mark src/core/rendererKaloyan Chehlarski2025-08-1624-0/+27
| | | | | | | | | | | QUIP: 23 Fixes: QTBUG-138721 Change-Id: Iab82da7e03551a5d76a08144c3f81c1485d85525 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit cfc7719808cbcc97dd73c886ea5378c9a0a8109b) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 5cbe6cd543272556e08f2266525dec91cd6a809d) (cherry picked from commit 67cc6212e671705c423b0df763613d0dba5e71c0)
* CRA mark src/core/compositor and src/core/ozonePeter Varga2025-08-1548-0/+49
| | | | | | | | | | | QUIP: 23 Fixes: QTBUG-138723 Change-Id: Iac39c4d70e3887e910fe32f70e42d914a854e62d Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit fbd466c74bd9b069062121839d56a8432e38e57c) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 3ec6722b9697814bd2f0a9f432304cd110573291) (cherry picked from commit ce21d8bc5927c3488b7065f7fbff213694033d9e)
* CRA mark src/core/netKaloyan Chehlarski2025-08-1434-0/+34
| | | | | | | | | | | QUIP: 23 Fixes: QTBUG-138722 Change-Id: I43973237573db286df2601c7b29928bcd7fc53e2 Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io> (cherry picked from commit a6efcdb29ec26b34367510fa2705cf5391de630b) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 3392bc7bbdb29aec8b2f0886f5a34addd3882632) (cherry picked from commit 42294b8e2b16840a2448f21090052de540b00f58)
* CRA mark src/core/file_system_accessKaloyan Chehlarski2025-08-1411-0/+11
| | | | | | | | | | | QUIP: 23 Task-number: QTBUG-138724 Change-Id: Id8b7ed78da12ea9c664d1f41e6181135ddfb394d Reviewed-by: Michael Brüning <michael.bruning@qt.io> (cherry picked from commit 5ac6fa831daffc8b1e7e0afe92ea69cf20040447) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit f95f77f1101543225ab5d30cdeba98889fb355da) (cherry picked from commit 0dde37aac4259155140d34f5555c461217be4ec4)
* CRA mark src/core/commonKaloyan Chehlarski2025-08-144-0/+5
| | | | | | | | | | | QUIP: 23 Task-number: QTBUG-138724 Change-Id: I91a17b1e3fc3c2ca715c41e369d59e48b057832f Reviewed-by: Michael Brüning <michael.bruning@qt.io> (cherry picked from commit 91ba39d2e2ad2d0ec5ae8058117fd1c96165244e) Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org> (cherry picked from commit 1c6eaff3c0514350d7bc91970500ee1bae90d8e1) (cherry picked from commit 0ce0d8c7db88590d8c3ede4a2197dd3308195155)