| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The machinery is quite complicated, so adding comments that explain it
helps when looking at it in the future.
Task-number: QTBUG-116619
Change-Id: Ic3ee295f8e0f46438e2cfa6f04f921ecac5a5dee
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
(cherry picked from commit 0d265a75eeee40fa982f5ac67c8062c57146ed6d)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit fec68365ec80422881538f55e9f873c72af05afb)
(cherry picked from commit 0d283d47a96fd0a7776335885f74f9fd805aefad)
|
| |
|
|
|
|
|
|
|
|
| |
Fixing link for
https://doc-snapshots.qt.io/qt6-dev/qwebengineglobalsettingsdnsmode.html
Change-Id: I78d9f78741ee1d750f2ec41a9e9329afadf2a787
Reviewed-by: Moss Heim <moss.heim@qt.io>
(cherry picked from commit 654975edafe0b54a01057789dbf6186127d9e3ed)
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
| |
|
|
|
|
|
|
|
| |
Submodule src/3rdparty a8a45eb9..197d5bc5:
* [backport] CVE-2025-13224
Fixes: QTBUG-142340
Change-Id: Ibf9be7e561a8101be06ff73b4b0b380ff1245135
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
As libxml 2.14 breaks binary but not source
compatibility the binaries from qt installer
might not work out of the box on distros which
only have newer libxml.
For time being release with bundled libxml2
2.12 to favor user experience over extra bundled
lib.
Fixes: QTBUG-136637
Change-Id: I72d14cfdad3deb51201bfec0ebf98b23e8337a40
Reviewed-by: Jani Heikkinen <jani.heikkinen@qt.io>
(cherry picked from commit cef684f2cb69509ad0a863f60e9f46154dc68d85)
Reviewed-by: Simo Fält <simo.falt@qt.io>
|
| |
|
|
|
|
|
|
|
| |
Submodule src/3rdparty a19b7521..a8a45eb9:
* [Backport] CVE-2025-13042: Inappropriate implementation in V8
Fixes: QTBUG-142339
Change-Id: Ic6688eb0846c9aa74d7ad99c012c2c9befdc111d
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Do not move compositor handle, make a clean job
a compositor observer instead. This prevents
the deadlock.
Fixes: QTBUG-141739
Fixes: QTBUG-141214
Change-Id: Ic51ce467ec65ae3cb1ae556328cf8eb171fe59a0
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
(cherry picked from commit 14c000f45324a64afdc922d138ac2ab2cdbd4622)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
If the popup window has the Qt::Dialog flag, some window managers may
try to resize and move the popup after it becomes visible. This can lead
to a blinking popup or even worse, it can cause a loop that continuously
moves the popup window.
Replace Qt::Tool flag with Qt::Popup to get rid of the Qt::Dialog flag
but keep popup as popup.
Note on Wayland Qt:Tool is xdg toplevel not a 'popup' neither 'grabbing
popup' and it creates shell surface. This means it will get random
position on the screen.
Note this tricky issue as we already changed that several times both
for widgets and quick due to different reasons (see 1390979a, 2f720836,
58467ed19, 7e7dd2625, c56169f7a1)
Fixes: QTBUG-140321
Task-number: QTBUG-132794
Task-number: QTBUG-138747
Change-Id: I8c3a94519008455fac2d8ab4c3bf34d860e2475b
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
(cherry picked from commit 65ea28e7204eaeb39588a33cfc2f69c48951aa6a)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This patch is band-aid patch to handle QQuickWebEngineView
transformations like scaling and rotation.
Before this patch we used mapToGlobal to get viewGeometry
however if the item is transformed by rotation and
scaling the mapToGlobal will return something not expected by
Chromium. Imagine:
--------- -------
| aaaaa | | aaaa|
| bbbbb | => rotates 90 => | bbbb|
| ccccc | | cccc|
--------- | |
-------
So Chromium still 'thinks' that content is displayed
horizontally and just window geometry changed.
Moreover, mapToGlobal for rect QRectF(tl,rb) when this is
rotated by 90 degree will return QRectF(tr,bl).nomralized()
in global coordinates. This is not correct geometry.
As band-aid solution for transform case, go with
fixed view geometry of QRect(0,0,widith(),hight())
This will allow to Chromium get untransformed popup position,
which we later transform in delegate. Fix and simplify
transformation calculations in QQuickWindow delegate
using just global screen coordinates.
Note having fixed view geometry will have side effect
like accessibility mappings broken or screen edge detection
not working (if dropdown comobox can not be displayed due to
screen border it is simply moved over the combobox filed)
Therefore, this is just band-aid solution, which covers anyway
rare use case of doing the QQuickWebview transformation
within the scene.
Tested with openbox, weston, mutter-wayland, mutter-xwayland.
Change-Id: I3c2d662ccd093793da6b5e192d79c9e22e451789
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
(cherry picked from commit 452e0aaed82ee01833455ef4616fb59a9fc7fc2b)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
During transition from Qt5 to Qt6, we moved some code to
core and in 5d1ef38f9 we moved RWHV delegate to core.
Before that change we used to feed chromium with geometry
and frame geometry of delegated window and later in case
of qquickwindow based delegate we did dome extra 'fixup'
calculations to cover the fact that using geometry()
for view geometry in screen coordinates did not include
actual item delegate offset from the qml scene.
However after the change we use simply mapToGlobal within
the delegate for view geometry which already knows exact
global coordinates for the item within the qml scene.
In e2185036 we have fix for accessibility layout,
however local coordinate mappings makes no sense as it
will always return "0".
this->mapFromItem(this,QPoint(0,0))
Use simply global coordinates here, and remove obsolete
"fixup" calculation for offset in qquickwindow delegate.
Note this patch does not care about rotated qquickwebengineview.
The band-aid patch for that is in followup.
Task-number: QTBUG-135040
Fixes: QTBUG-140321
Fixes: QTBUG-139709
Change-Id: I01266b42bc74120e39e2703db78c2b9c3548572f
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
(cherry picked from commit 68322bd57bd790d609e85599d3c524c9650e31c2)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Chromium needs to be aware of view geometry changes.
We do the sync in visualPropertiesChanged call, which
in turn is called from item geometryChanged and
itemChanged handlers.
However, this approach is not sufficient to track global
geometry changes as it only covers case where geometry change is
local to item's parent.
Therefore, we need watch the entire parent hierarchy
to correctly handle global geometry change notifications.
Note this issue only affects webenginequick as
rwhv can have offset from the scene due to explicit
position or anchoring within other items.
Moreover, anchoring of child item can mean
making offset in parent item.
Add logic to track offset changes of parent items.
Use 'polish' accumulate required notification and
do visualPropertiesChanged() in updatePolish() call.
Fixes: QTBUG-141476
Change-Id: Ia35a6f243624cb06b6b45f76abf8ba544790e2c0
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
(cherry picked from commit 85be04668e0d4f176ae44da772b9da58dff388e5)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 31fb6939..a19b7521:
* [Backport] Security bug 460017370
* [Backport] Dependency for security bug 460017370
* [fixup] [Backport] CVE-2025-11460: Use after free in Storage
Change-Id: Ia06b00f78d93bf667e7475442f3285c0908a14f7
Reviewed-by: Moss Heim <moss.heim@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, if dma_buf was not supported or allocating a GBM buffer
object failed, we tried to fall back to a Vulkan texture, assuming the
failure was due to GBM being disabled. However, this fallback would
also fail because a Vulkan texture could not be generated, resulting
in the confusing warning:
"Backend texture is not a Vulkan texture."
This change ensures that the warning is only issued if Chromium actually
generated the texture using Vulkan, avoiding false fallback warnings.
Change-Id: I8866120e6641a1dce846b26f707dc04b489893a7
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Moss Heim <moss.heim@qt.io>
(cherry picked from commit 9f07c957de0a587a1b8b02a3f182dbbb092ddf1d)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 2fbae4826a991ccbeabcf5ba6557499f52de548f)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 6bc7cda4..31fb6939:
* [Backport] CVE-2025-12726: Inappropriate implementation in Views (3/3)
* [Backport] CVE-2025-12726: Inappropriate implementation in Views (2/3)
* [Backport] CVE-2025-12726: Inappropriate implementation in Views (1/3)
* [Backport] Dependency for CVE-2025-12726 / Security bug 402791076
* [fixup] [Backport] CVE-2025-6021
* FIXUP: [Backport] CVE-2025-12441: Out of bounds read in V8
* CVE-2025-12429: Inappropriate implementation in V8
* [Backport] CVE-2025-12438: Use after free in Ozone
* [Backport] CVE-2025-12441: Out of bounds read in V8
* [Backport] CVE-2025-12433: Inappropriate implementation in V8
* [Backport] CVE-2025-12443: Out of bounds read in WebXR
* Fixup: [Backport] CVE-2025-11756: Use after free in Safe Browsing
* [Backport] CVE-2025-6021
* [Backport] IWYU modules/desktop_capture and modules/video_capture for PipeWire
* [Backport] IWYU modules/video_capture
Fixes: QTBUG-141597
Fixes: QTBUG-141749
Change-Id: Ic7d14ac69b1d88263c582ace5c525c4bfab876fb
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty c9acb79d..6bc7cda4:
* ANGLE: Don't hard-code toolchain path for metallib tool
* ANGLE: Don't hard-code toolchain path for metal tool
* [Backport] CVE-2025-24928
* [Backport] CVE-2025-11756: Use after free in Safe Browsing
* [fixup][backport] CVE-2025-8582: Insufficient validation of ...
Fixes: QTBUG-141409
Change-Id: I534f5b8f79da8a11cbb6ccf5a039a41ca17c69d7
Reviewed-by: Moss Heim <moss.heim@qt.io>
|
| |
|
|
|
|
|
|
|
| |
Task-number: QTBUG-140916
Change-Id: I3b356c53fa485c1b253841bfad3d8e0568c18679
Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
(cherry picked from commit b90fe93da2f8ed2004239202c26d42f830c5c690)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 54297aa3eb1a34fdaf4bf8560f7d67b792901e90)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 3257cebb..c9acb79d:
* [Backport] CVE-2025-11460: Use after free in Storage
* [Backport] CVE-2025-11458: Heap buffer overflow in Sync
* [Backport] CVE-2025-11216: Inappropriate implementation in Storage
* [Backport] CVE-2025-11207: Side-channel information leakage in Storage (2/2)
* [Backport] CVE-2025-11207: Side-channel information leakage in Storage (1/2)
* [Backport] Security bug 435068768
* [Backport] Security bug 439058241
* [Backport] Security bug 441427753
* [Backport] CVE-2025-6965 / Security bug 434161973
* [Backport] Security bug 435225528
* [Backport] Security bug 440866282
* [Backport] CVE-2025-11206: Heap buffer overflow in Video
* [Backport] Disable NSAutoFillHeuristicController on macOS 26
* [Backport] Roll src/third_party/ffmpeg/ 01f23648c..dcdd0fa51 (552 commits)
Fixes: QTBUG-140867
Fixes: QTBUG-140913
Change-Id: Ie1e4c51f8682a2befaec516d41a3dfa73f7d2e34
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
| |
Fixes: QTBUG-131443
Change-Id: I483be0d0ed6002ab334d4992169c66d086551841
Reviewed-by: Sami Varanka <sami.varanka@qt.io>
Reviewed-by: Tomi Korpipää <tomi.korpipaa@qt.io>
(cherry picked from commit d7d9b7b94b0ca1e8d79414e9161fe0da468eaa35)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 6f725fc9dfa3bbef0285eab6cb4108c19a38bfb0)
|
| |
|
|
|
|
|
|
|
| |
Change-Id: Ia8375615ade18fa1fea3bb42fb6dc560398166d3
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Kaloyan Chehlarski <kaloyan.chehlarski@qt.io>
(cherry picked from commit e4792cbbab8e66981c79694a4eb99e34af1f6410)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 1e958e3526af70e8d39d04a22743865295326e1e)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
These objects are often parented to the QWebEngineView, but not cleaned
up when changing pages, resulting in increasing memory usage over time.
It should be safe to delete them after the associated accessibility node
is deleted.
Fixes: QTBUG-140234
Change-Id: I215ca01aca10873b5ce86224d98907d41e6c8991
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
Reviewed-by: Kaloyan Chehlarski <kaloyan.chehlarski@qt.io>
(cherry picked from commit 9fad93e7f8215027ad6f2076be558e9386f6b8f1)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit ed64469d85347ce29fc7764534d014e86c34b860)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When building a single-arch static build of QtPdf on macOS, and
linking to it in a user project with qmake, one got the following
error:
ld: library 'GnObject_Pdf_Debug' not found
This happened because the build system created an IMPORTED OBJECT
library called GnObject_Pdf_Debug that is linked to the static QtPdf
target via target_link_libraries(PRIVATE).
When linking any dependency privately to a static library, CMake
implicitly also populates its INTERFACE_LINK_LIBRARIES with a
$<LINK_ONLY:GnObject_Pdf_Debug> dependency.
This in turn got processed by qt_generate_prl_file() ->
__qt_internal_walk_libs() which added a plain -lGnObject_Pdf_Debug
to the .prl file of the static QtPdf library, even though we install
no such library.
Make sure we wrap the GnObject_* dependency in a
QT_SKIP_WALK_LIBS_PROCESSING genex, so that __qt_internal_walk_libs
skips adding it to the .prl file.
Wrap the dependency also in a BUILD_INTERFACE genex, so that it's not
exported in the PdfTargets.cmake file either, because the relevant
object file is already included in the static QtPdf library.
Fixes: QTBUG-140032
Change-Id: Ie13e4e473f973564fe7a7f284a646edb18264dc0
Reviewed-by: Alexey Edelev <alexey.edelev@qt.io>
(cherry picked from commit a9bb185ad2bfe9b8bba9421d287b85bb90be08af)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 96bbf3f83dd324149bf79212da9001a32e2922b0)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
add_intermediate_object is used to merge multiple object files into a
new object file. The original object files are compiled with the correct
minimum deployment target, but the combined object file does not have
its minos field specified. This can cause linker warnings when linking
this object file into applications.
We now pass -mmacosx-version-min to clang++ -r explicitly to ensure that
the minos field is correctly populated.
Fixes: QTBUG-140029
Change-Id: I9df090d0140a1d881979d4a105ee9f597be6f3e1
Reviewed-by: Alexandru Croitor <alexandru.croitor@qt.io>
(cherry picked from commit dfcf502e3479844cb61b333eff6d900e07f38cce)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit f237c431a7b8cc7c4efc7a949ca3167ac4069186)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When a redirect is followed, Chromium will inject the profile's default
user agent string into the list of headers to modify for the redirect
request. This effectively clears any user-provided user agent overrides.
This change removes the User-Agent header from the list of modified
headers, allowing the user-supplied one to be used instead.
Fixes: QTBUG-140515
Change-Id: I444a286cc5ca728a2d8abcd51eee69cf95a4e543
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit ec2ad7c978ea86b0c03d8b0987f7421da40d75ff)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit ddc62112f1b17f07cf06b6bf8e725dfd035b9021)
|
| |
|
|
|
|
|
|
|
|
|
| |
It's noisy in practice.
Fixes: QTBUG-122766
Change-Id: I9c03ee6849568f6f52d55a0072becf11b9f8a50d
Reviewed-by: Friedemann Kleint <Friedemann.Kleint@qt.io>
(cherry picked from commit 8f05eaa6a91e12418e4268211d2e2c6052f52e3f)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit bbca500604464e1742c0dfcee5fcb65696598ccf)
|
| |
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138726
Change-Id: Ieee01149fd953d712127b4e53e5056b47910a441
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit ae9e9aab164006a3b6e34b9640f7c3c5a68173a4)
(cherry picked from commit 8cdbe03f7882a38e712dd45b0c96852979475343)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
| |
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138728
Change-Id: I36a12aaaf01cd3c3e763c86d9065efae2b6ccbae
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit bad281f1bd65bb4becdd7fa0ddcd4b1d190ac430)
(cherry picked from commit 33d1c2511b6f2a8485cfee233bfe6d1d3df850e6)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
| |
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138729
Change-Id: If91f79fe9d2f8ef7278c99794ea74bc0ceb71d1e
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit d7de61a253e77ecf3239755c2244fbc10093b06a)
(cherry picked from commit 07ff05f5f0f06342e1ff2cf50cef109b0914fe49)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
| |
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138730
Change-Id: Iaff7ccc266691b16f403cbf02575aea8c287bcb0
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 87c8958e766a870ae2458f7f0e8b947a225e5d1f)
(cherry picked from commit 2bc809f3a08a7df6c3dd2b863c47d7571cac972d)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
| |
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138731
Change-Id: I5ed7d15332dea5e26e84b8f82339c0ba537ba660
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit eb100fdbddf65f98bb1da4b83a70307d0191a594)
(cherry picked from commit b59517735a1ee6ac9e0c67309cae765d04127cd4)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 71a06c58..c6fb70d8:
* [Backport] CVE-2025-10502: Heap buffer overflow in ANGLE
* [Backport] Dependency for CVE-2025-10502
* [Backport] CVE-2025-10501: Use after free in WebRTC
* [Backport] CVE-2025-10500: Use after free in Dawn
* [Backport] Security bug 445380761
* [Backport] perfetto: tp: prepend to path when generating tp table headers
* minibgm: fix missing include libgen.h
Task-number: QTBUG-140231
Change-Id: Ib3768a1f694246a11d6063ada45f64c5b9e64a6f
Reviewed-by: Moss Heim <moss.heim@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
If certain X11 libraries are missing then the BUILDFLAG(IS_OZONE_X11) is
false. In this case, desktop-gl won't get added to the allowed GL
implementations and the application crashes.
To circumvent this, add a warning message and fallback to software
rendering.
Change-Id: I514074fff23f5b7dfeb95b0cce1d05f10912edff
Reviewed-by: Moss Heim <moss.heim@qt.io>
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
|
| |
|
|
|
|
|
|
|
|
| |
Change-Id: Ifffe48cce9d0acb85c5aca398894c2d359626672
Reviewed-by: Peter Varga <pvarga@inf.u-szeged.hu>
Reviewed-by: Moss Heim <moss.heim@qt.io>
(cherry picked from commit 56f2cf847b2eca28bba698041d47d5432f3c624d)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 57857d062d6ddb0ae26c142ff076819bf236b3bd)
(cherry picked from commit 97702883160b8533ae13ac07360e5df367dc960a)
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138720
Change-Id: I9c064bef911e36c12553fc6cebb7408fb02bcc0b
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 842e0732233b677ba8bc093c6a11a215bf8a8973)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit c7d7a7d56c54029fee594841961668157bd9bf26)
Reviewed-by: Moss Heim <moss.heim@qt.io>
(cherry picked from commit c6366056016474e9b10a0ee7eb7d4977054e8133)
Reviewed-by: Michal Klocek <michal.klocek@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 7988ac09..71a06c58:
* [Backport] CVE-2025-10201: Inappropriate implementation in Mojo
* [Backport] CVE-2025-10200: Use after free in Serviceworker
* [backport] CVE-2025-9866
* [fixup][gcc-10] Fix compilation issue with gcc-10
* [Backport] CVE-2025-8901: Out of bounds write in ANGLE
* [Backport] CVE-2025-8881: Inappropriate implementation in File Picker
* [Backport] CVE-2025-8880: Race in V8
* [Backport] CVE-2025-8879: Heap buffer overflow in libaom
* [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (2/2)
* [Backport] CVE-2025-6558: Incorrect validation of untrusted input in ANGLE and GPU (1/2)
* [Backport] CVE-2025-8580: Inappropriate implementation in Filesystems
* [Backport] Security bug 421544815
* [Backport] CVE-2025-8576: Use after free in Extensions
* [Backport] CVE-2025-8582: Insufficient validation of untrusted input in DOM
Fixes: QTBUG-138967
Fixes: QTBUG-139301
Fixes: QTBUG-139399
Fixes: QTBUG-140101
Fixes: QTBUG-140102
Change-Id: Ic4b9251b84e20994f6361f5255681cf6047c28f2
Reviewed-by: Moss Heim <moss.heim@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Submodule src/3rdparty 1cacccf9..7988ac09:
* (HEAD) [Backport] Security bug 431828026
* [Backport] Security bug 431668129
* [Backport] Security bug 432661300
* [Backport] Security bug 428177287
* [Backport] CVE-2025-7657: Use after free in WebRTC
* [Backport] Security bug 428754691
* [Backport] CVE-2025-7656: Integer overflow in V8
* [Backport] Security bug 427316421
* [fixup] Adapt favicon and history component for WebEngine
* [Backport] [zlib][build] Remove fdopen #defines in zutil.h
* [Backport][libpng] Apply 893b811 from upstream to fix macro issue
* [fixup] [Backport] Security bug 420885124
* Fix compilation in ci with lastest security patches
* [Backport] CVE-2025-6554: Type Confusion in V8
* [Backport] Security bug 415397143
* [Backport] Security bug 420885124
* [Backport] Dependency for security bug 42088512
* Fix gcc 12 build with bookworm
* [fixup] Reinstate jumbo-builds
* [Backport] Security bug 416535738
* [Backport] CVE-2025-6191: Integer overflow in V8
Fixes: QTBUG-138842
Fixes: QTBUG-138843
Fixes: QTBUG-138844
Fixes: QTBUG-138217
Fixes: QTBUG-138218
Fixes: QTBUG-137881
Change-Id: Ie12720b006a7bd54acc28b8a1cca95e3aefa67fa
Reviewed-by: Moss Heim <moss.heim@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This change modifies a few of the table-related methods inside
BrowserAccessibilityInterface to use corresponding specialty
methods from Chromium's a11y implementation, instead of relying
on manually extracted attributes. This fixes table contents
always being reported as 'blank' to screen readers.
The kRowHeader and kColumnHeader roles are now exposed as Cell
to Qt (and thus, to the system), which is consistent with what
Chromium does; exposing them to Qt as QAccessible::Row/ColumnHeader
causes some issues when navigating with VoiceOver on macOS.
The caption() method is now implemented as well.
macOS-only implementations of certain platform methods related
to tables have been copied over as well. This fixes some crashes
when iterating through children.
As a drive-by, this also fixes a rare a11y-related crash when in
the middle of deleting a page.
Fixes: QTBUG-136622
Change-Id: I157bece10d3c2261722d7f70e2b879c1d462b137
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 80547b9d786ee4773cabe9c610a5ad60569cf61a)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 95593639d124f7adf62418c2a628aacc5284ef74)
(cherry picked from commit 74202ef3d82ee433e08f593093293a9efd928f42)
|
| |
|
|
|
|
|
|
|
| |
Ensure exposure before requesting activation
Change-Id: I488e01098b06c4cdc7ead2841548c19e944bab8d
Reviewed-by: Moss Heim <moss.heim@qt.io>
(cherry picked from commit 893e57b390e0fee539abb033f792144a2fb398a4)
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Reverts most of f5fbc34fc16fc9c6e7f7e8bbbf60f5b343b9466d, relying on
better implicit QML conversion since.
Fixes: QTBUG-138881
Change-Id: Ic23579e421f737b9a4d85c7e4f1a4019323c4be9
Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
(cherry picked from commit b02b9fb4346bd99164256f43d02b4bd85637b11b)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 90c35756dd9ee90a23656a8235b86db111d31365)
(cherry picked from commit 8523b4febbad54e47f55b6e2343dc9b3d041bf85)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Change-Id: Ic774a8415afdc198aab88f19e7f6b860ec766728
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 6f0cfb5ad9fd121b5335863c88e1dfa12c18a1eb)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit cb0734d305a75c1066a9fc9dd464e6d0fcae06b3)
(cherry picked from commit c121ab1632461beacff53f8ddf38085d22edd057)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138714
Change-Id: I330d87a2441a9256965892b0078a9d6d23f9f60c
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 99eb5738b18dbcf1b27542a28f66611d78cd3133)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 1316ef37495a6b4844251de662dbb810830e05bf)
(cherry picked from commit 54af90a346d07113abe514e510d244f874d67a9a)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Change-Id: I2cebf8b03edc00bc6fb1e7c034311cb9fe763139
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 625d13f5835e541a1867df098155c588d69b4215)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit e2eeba8e95db9d9ce6677ce1bdae6d7ec937aaaf)
(cherry picked from commit 9d914918e4691389b0b12fc8771c71140b4b1343)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This issue is seen with clang-19 when compiling for arm32
make clang-19 happier with -Wc++11-narrowing
Fixes
native_skia_output_device_opengl.cpp:292:47: error: non-constant-expression cannot be narrowed from type '
↪ uint32_t' (aka 'unsigned int') to 'EGLAttrib' (aka 'int') in initializer list [-Wc++11-narrowing]
292 | EGL_DMA_BUF_PLANE0_PITCH_EXT, nativePixmap->GetDmaBufPitch(0),
Change-Id: I95ba1ab0a37218b6d05324df563efba6d5c39ba2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit f94d2a539c3189b086615749cfde65ca2058e04c)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 8bc191ff6e879cb01ae4f2a2fc719f5b9b3eed4e)
(cherry picked from commit 2bb6c8aee1081ff4656d46bab1b8d9458a58e944)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fix build race condition, as file sandbox_win.cpp includes global header, make sure headers are in sync before trying to build static sandbox lib.
Build log error on bug report.
This amends e372bb3dad121465d61cc15de18c06c85f938072.
Fixes: QTBUG-138159
Change-Id: Iab5be9082a31b56aece926a0267e0a7378635996
Reviewed-by: Alexey Edelev <alexey.edelev@qt.io>
(cherry picked from commit 73a8a4ee569515c094cce0d13d0c82f463eae1a1)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 4de77b0c6d6b9ab8425e87af19d5d0579829d587)
(cherry picked from commit f51c34d68be155373b80515aa92bd7094860efaa)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138725
Change-Id: I53074540f4340b1e8b20de5fa3c90f75db45547b
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 8bae6acaf36bb00364c645ee522a1231fcb16251)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit ec1a119fa96e162c9475f97d142d1c05e010f9aa)
(cherry picked from commit ae74f985d8dd4eebcfbc85ffe7e93c6eeece4881)
|
| |
|
|
|
|
|
|
|
| |
Change-Id: Ia7e65f9050a1e57a3a2c7da69088e68fc7874ef1
Reviewed-by: Ulf Hermann <ulf.hermann@qt.io>
(cherry picked from commit 1eb2cb02f7ebdfc15a0d2ddc7837d4cffe073006)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 0aa6934d4cbd9158647082798207be82c5e5bda4)
(cherry picked from commit f25b5c1c31dcc6c6d2bdefaf823b18c817306a4e)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
QAccessible::Paragraph maps to a Text control on Windows, which
causes Narrator to completely ignore its child nodes. Since even a
simple <p>Content</p> generates two nodes, a nameless parent
kParagraph and a named child kStaticText, the result is that
Narrator will see a Text node with no name, and simply read "text".
This change maps the kParagraph role to QAccessible::Grouping, which
allows Narrator to see its child nodes and read their contents aloud.
Fixes: QTBUG-134055
Change-Id: I96d4262bd4149f1dec50d47491263d0b022d4b83
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit 245e1dacc930f52e8d6f09178e3942c33e785b10)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 265718fe80b5cf67f63d55a9328b9d12d4a1ebcd)
(cherry picked from commit 96bafc4c768f01e6dff5f42d54127dac1cbd162a)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138721
Change-Id: Iab82da7e03551a5d76a08144c3f81c1485d85525
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit cfc7719808cbcc97dd73c886ea5378c9a0a8109b)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 5cbe6cd543272556e08f2266525dec91cd6a809d)
(cherry picked from commit 67cc6212e671705c423b0df763613d0dba5e71c0)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138723
Change-Id: Iac39c4d70e3887e910fe32f70e42d914a854e62d
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit fbd466c74bd9b069062121839d56a8432e38e57c)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 3ec6722b9697814bd2f0a9f432304cd110573291)
(cherry picked from commit ce21d8bc5927c3488b7065f7fbff213694033d9e)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Fixes: QTBUG-138722
Change-Id: I43973237573db286df2601c7b29928bcd7fc53e2
Reviewed-by: Allan Sandfeld Jensen <allan.jensen@qt.io>
(cherry picked from commit a6efcdb29ec26b34367510fa2705cf5391de630b)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 3392bc7bbdb29aec8b2f0886f5a34addd3882632)
(cherry picked from commit 42294b8e2b16840a2448f21090052de540b00f58)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138724
Change-Id: Id8b7ed78da12ea9c664d1f41e6181135ddfb394d
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
(cherry picked from commit 5ac6fa831daffc8b1e7e0afe92ea69cf20040447)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit f95f77f1101543225ab5d30cdeba98889fb355da)
(cherry picked from commit 0dde37aac4259155140d34f5555c461217be4ec4)
|
| |
|
|
|
|
|
|
|
|
|
| |
QUIP: 23
Task-number: QTBUG-138724
Change-Id: I91a17b1e3fc3c2ca715c41e369d59e48b057832f
Reviewed-by: Michael Brüning <michael.bruning@qt.io>
(cherry picked from commit 91ba39d2e2ad2d0ec5ae8058117fd1c96165244e)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 1c6eaff3c0514350d7bc91970500ee1bae90d8e1)
(cherry picked from commit 0ce0d8c7db88590d8c3ede4a2197dd3308195155)
|