PDFium 127.0.6531.0

This version was built with branch chromium/6531 of PDFium

Changes

Commits between chromium/6517 and chromium/6531:

• Correctly handle image transparency in path objects
• Add tests for pdfium::span<> interoperability with gmock macros.
• Restore JPEG2000 colorspace mismatch handling workaround
• Mark two-arg WideString() constructor as UNSAFE_BUFFER_USAGE.
• Mark more two-arg fxcrt functions as UNSAFE_BUFFER_USAGE.
• Spanify FileAccessIface.
• Use the term "Binding" in place of "Private" in fxjs/.
• Rename FXJS_PerIsolateData to CFXJS_PerIsolateData.
• Do less work in JSGetObject()
• Mark two-arg ByteString() constructor as UNSAFE_BUFFER_USAGE.
• Enforce unsafe buffers on 2-arg StringViewTemplate constructor.
• Loosen palette check in FPDFImageObj_GetBitmap()
• Roll build/ 01e3c73f5..5b8c05aed (80 commits)
• Fix/Mark unsafe buffer regions is CJPX_Decoder
• Roll buildtools and libc++
• Remove calls to v8::FunctionCallbackInfo::Holder()
• Tidy some types in fxcodec/bmp.
• Resolve/mark unsafe regions in CFX_BmpDecompressor.
• Spanify usage of JBig2ArithCtx in fxcodec/jbig2
• Mark fxcodec::ReverseRGB() as UNSAFE_BUFFER_USAGE.
• Roll third_party/libunwind/src/ 419b03c0b..ab43b1d3c (7 commits)
• Roll third_party/libc++abi/src/ 51fe35844..c5d2b1886 (11 commits)
• Roll DEPS for abseil and clang
• Fix inconsistent return value from GetLiteralText().
• Resolve unsafe buffers warnings in blend.cpp
• Avoid safe numerics underflow trap in CJBig2_BitStream::getByteLeft().
• Roll Memory Tools from 2448d81f9741 to c5b623b3ba22 (1 revision)
• Roll Zlib from 7d77fb7fd66d to 209717dd69cd (3 revisions)
• Roll Instrumented Libraries from 682a735d9f5c to 1d704cadac0d (76 revisions)

PDFium 127.0.6517.0

This version was built with branch chromium/6517 of PDFium

Changes

Commits between chromium/6504 and chromium/6517:

• Remove CPDF_IndexedCS::base_component_count_
• Change CPDF_IndexedCS::lookup_table_ to a DataVector
• Begin replacing some v8 info.Holder() with info.This().
• Convert CPDF_IndexedCS::component_min_max_ to a struct
• Validate CPDF_IndexedCS::max_index_
• Rename CPDF_IndexedCS member variables
• Avoid some two-arg {Byte,Wide}StringView constructors.
• Fix unsafe buffer usage in fx_linux_impl.cpp
• Fix unsafe buffer warnings in cfx_dibbase_skia.cpp
• Fix unsafe buffers in android/skia fxge file.
• Fully switch from ObservePtr to RetainPtr in CPDF_DocPageData
• Fix unsafe buffer usage in CPDF_RenderShading
• Fix unsafe-buffer usage in CXFA_ContentLayoutProcessor
• Convert to std::array<> in CXFA_ContentLayoutProcessor.
• Remove per-file unsafe_buffer suppression for fxge/win32 files.
• Remove per-file unsafe_buffer suppression from several fxge files.
• Remove file-wide unsafe-buffers suppression from cxfa_fmlexer.cpp,
• Fix/Mark unsafe buffers in {fax,flate,jpg}module.cpp
• Relax JPX colorspace check in GetJpxDecodeActionFromColorSpaces()
• Fix unsafe buffer issues in fxcodec/gif
• Upgrade OpenJPEG to 2.5.2
• Fix or mark some unsafe code in fxcoded/jbig2
• Update gn_version to 70844c8af4f604899281261be414b8c113fcbbf0
• Roll v8/ a9dc62b2c..317778857 (235 commits)
• Fix OOB access inside CBC_PDF417
• Mark unsafe regions in core/fxge/apple
• Add minor static assert for fixed-size spans.
• Fix unsafe code in fx_crypt_sha.cpp or mark unsafe regions.
• Fix unsafe code in fx_crypt_aes.cpp or mark unsafe regions
• Fix unsafe code in fx_crypt.cpp and mark remaining regions.
• Roll third_party/skia/ 04ee4daae..ba0db3c0a (302 commits)
• Spanify a few more APIs away from discrete size parameters.
• Roll third_party/freetype/src/ 1168b1b5b..7ff43d3e9 (37 commits)
• Mark unsafe buffer regions in CPDF_DIB and CPDF_TransferFuncDIB.
• Roll base/allocator/partition_allocator/ 17c0ead1e..f61289829 (8 commits)
• Resolve unsafe buffer usage in fxbarcode/qrcode/.
• Roll third_party/googletest/src/ fa6de7f43..305e5a238 (4 commits)
• Roll third_party/icu/ d94ab131b..98f249451 (1 commit)
• Convert kQRCoderECBDataTable to std::array<>.
• Mark (large) unsafe region in cfx_globaldata.cpp
• Remove class CBC_QRCoderECBlocks.
• Roll third_party/libjpeg_turbo/ 9b894306e..ccfbe1c82 (1 commit)
• Roll Depot Tools from 4246ba023a15 to 7d95eb2eb054 (134 revisions)
• Roll Code Coverage from 1b0ca9db1266 to bfffc566bf0a (3 revisions)

PDFium 127.0.6504.0

This version was built with branch chromium/6504 of PDFium

Changes

Commits between chromium/6490 and chromium/6504:

• Remove BUG_PREFIX from codereview.settings
• Avoid uninit value in CBC_PDF417I::Encode()
• Mark unsafe regions in cfgas_gegraphics.cpp.
• Do not use strict mode when decoding JPEG2000 images
• Fix unsafe buffer usage in fxbarcode/oned
• Fix unsafe regions in fxbarcode/pdf417/
• Mark unsafe_buffer regions in fgas/{crt,font}
• Remove unused RetainPtr::BackPointer()
• Mark unsafe regions in fgas/layout files.
• Mark unsafe regions in core/fpdfapi files.
• Spanify methods in BC_OneDimWriter
• Use fxcrt:ToArray<>() in more places.
• Rename CPDF_String variables
• Roll base/allocator/partition_allocator/ 0e650666e..17c0ead1e0f8 (14 commits)
• Take std::to_array<>() equivalent from chromium base.
• Fix a regression in linearized PDFs that have been edited
• Mark unsafe_buffers region in many fpdfapi/page files
• Fix unsafe usage in CPDF_StreamContentParser
• Mark unsafe_buffers regions in core/fpdfapi/font files.
• Mark unsafe_buffers sections in core/fpdfdoc/ non-test files
• Mark unsafe regions in CFGAS_Decimal implementation
• Use safe string operations in CFGAS_Decimal.
• Fix unsafe buffer in CPDF_StreamParser
• Avoid CPDF_String instantiation in FPDFAttachment_GetStringValue()
• Fix crashes in FPDFAttachment_GetStringValue()
• Replace 3-parameter CPDF_String ctor
• Fix regression in CFX_AggDeviceDriver::SetClipMask()
• Add a 2-parameter CPDF_String ctor
• Ensure FixedSizeDataVector contains only data
• Make CFX_CodecMemory XFA-only
• Relax pdfium_test assertion for not depending on gtest
• Remove unneeded core/fxcrt/fx_memory_wrappers.h includes
• Rename DataVectorAndBytesConsumed to DataAndBytesConsumed
• Convert FlateUncompress() to return DataVectorAndBytesConsumed instead
• Change CFX_FolderFontInfo to use FixedSizeDataVector
• Fix unsafe buffer usage in core/fxge/dib/cfx_cmyk_to_srgb.cpp.
• Introduce more helpful FX_*_STRUCT classes.
• Remove unnecessary encode/decode inside FPDFAttachment_SetFile()
• Remove unused includes from {byte,wide}string.h
• Avoid invoking methods directly against observed this.
• Change PDFDataDecodeResult to use DataVector
• Defensive programming around ObservedPtr<CPDFSDK_Annot>().
• Once this observed, only access members through observed ptr.
• Avoid depending on gtest in scoped_locale.cc
• Change FlateOrLZWDecode() to return DataVectorAndBytesConsumed
• Return DataVector from PNG_Predictor()
• Change CLZWDecoder to use DataVector
• Move switches out of inner loop in FlatePredictorScanlineDecoder
• Get rid of extra byte allocated in FlateUncompress()
• Use more spans inside flatemodule.cpp
• Roll Catapult from 5fbda23b3a86 to 1bce0121e31e (52 revisions)

PDFium 127.0.6490.0

This version was built with branch chromium/6490 of PDFium

Changes

Commits between chromium/6476 and chromium/6490:

• Use FixedSizeDataVector instead of DataVector in cpdf_creator.cpp
• Once observed, stop using underlying raw members.
• Remove out-parameters from PNG_Predictor()
• Call PNG_PredictLine() from PNG_Predictor()
• Take advantage of spans more in PNG_Predictor()
• Adjust PNG_PredictLine() parameters
• Refactor identical code in PNG_PredictLine() and PNG_Predictor()
• Move switches out of inner loops in PNG_PredictLine() / PNG_Predictor()
• Observe widgets earlier in CFFL_{Combo,List}Box::SaveData().
• Use only spans in PNG_PredictLine() and PNG_Predictor()
• Change TIFF_PredictLine() to take a span
• Grab clang-format and linux sysroots using recursivedeps
• Stop using deprecated v8::ObjectTemplate::SetAccessor()
• Rename template FX_RGB to FX_RGB_STRUCT.
• Split input and output parameters for PNG_Predictor()
• Change TIFF_Predictor() to have a span parameter
• Remove out-parameters from PDF_DataDecode()
• Mark individual lines in some core/fpdfapi files UNSAFE_TODO().
• Change FlateCompress() to use spans
• Clean up PathPredictor()
• Remove out-parameters from more codec decoding functions
• Remove out-parameters from FlateOrLZWDecode()
• Remove out-parameters from FlateModule::FlateOrLZWDecode()
• Remove out-parameters from FlateUncompress()
• Mass correct bug number in #pragma comment.
• Introduce UNSAFE_TODO() macro.
• Mark UNSAFE_BUFFERS in cpdf_{crypto,security}_handler.cpp
• Fix unsafe buffer in more core/fpdfapi/parser files.
• Roll v8/ 0832ba514..a9dc62b2c (267 commits)
• raw_ptr: USE_ASAN_UNOWNED_PTR -> USE_RAW_PTR_ASAN_UNOWNED_IMPL
• Roll base/allocator/partition_allocator/ 3b0bd80fa..0e650666e (14 commits)
• Remove unsafe_buffer #pragma from fpdftext/ files
• Fix unsafe buffer usage in CPDF_Parser
• Resolve unsafe buffer issues in CFX_CTTGSubTable
• Avoid file-wide unsafe_buffer #pragmas in two jpx/ files
• Resolve unsafe buffer issues in remaining core/ header files
• Avoid unsafe buffers in cfde_texteditengine
• Pass span instead of ptr to vector in GetDisplayPos().
• Avoid unsafe buffer usage in xfa/fxfa.
• Remove unsafe buffer usage in xfa/fwl.
• Avoid unsafe buffer usage in CFGAS_GEShading
• Remove unsafe buffer usage from charposlist.cpp
• Add APIs to fetch struct element attributes of type array
• Resolve unsafe buffer usage in CPDF_IndexedCs
• Resolve unsafe buffer issues in CPDF_TextObject
• Remove #pragma unsafe_buffer_usage from CPDF_DocPageData.
• Checkout Linux sysroots using DEPS entrees instead of hooks
• Checkout clang-format using DEPS entrees instead of hooks
• Move location of clang-format checkout
• Roll build/ 5eb3babb0..01e3c73f5 (24 commits)
• Roll buildtools/ d0f0285d0..4e0e9c73a (3 commits)

PDFium 126.0.6476.0

This version was built with branch chromium/6476 of PDFium

Changes

Commits between chromium/6462 and chromium/6476:

• Resolve unsafe buffer usage in cpdf_aaction.cpp and cpdf_action.cpp
• Fix unsafe buffer usage in xfa_basic_data.cpp
• Rework experimental FPDF_StructElement_Attr_* APIs
• Change FPDF_StructElement_Attr_* APIs to never return a reference
• Remove pragma unsafe_buffer_usage from CPDF_CMapParser.
• Remove #pragma allow_unsafe_buffers from cpdfsdk_appstream.cpp
• Narrow scope of UNSAFE_BUFFERS() in fpdfsdk/fpdf*.cpp
• Resolve unsafe buffer usage in CPDF_PSEngine
• Remove <string.h> inclusion from {Byte,Wide}String headers.
• Remove spurious includes of <string.h>.
• Remove file-wide unsafe_buffers pragmas from fpdfsdk/fpdf*.cpp
• Remove memcpy() from fpdfsdk/fpdf*.cpp (non-test files).
• Move pdfium_test.cc from samples/ to testing/
• Fix return of span_with_terminator() for empty string.
• Explain FPDFPage_RemoveObject() side effect on FPDF_TEXTPAGE handles
• Split off aes/sha headers from fx_crypt.h
• Roll third_party/googletest/src/ eff443c6e..fa6de7f43 (18 commits)
• Mass convert memmove() to FXSYS_memmove().
• Remove code that assumes CPDF_PageObjectHolder contains nullptrs
• Mass convert memset() to FXSYS_memset().
• Add fxcrt::Fill()
• Convert some memset(x, 0, sz) calls to aggregate initializations.
• Mass convert memcpy() to FXSYS_memcpy().
• Convert to std::array<> in CPDF_SimpleFont.
• Use #pragma allow_unsafe_buffers, not pdfium_unsafe_buffers_paths.txt
• Convert to std::array in cmaps/.
• Convert to extern std::array<> in /chromefontdata.
• Roll buildtools/clang_format/script/ e5337933f..3c0acd2d4 (23 commits)
• Roll Zlib from d076d8bd0898 to 7d77fb7fd66d (3 revisions)

PDFium 126.0.6462.0

This version was built with branch chromium/6462 of PDFium

Changes

Commits between chromium/6447 and chromium/6462:

• Roll build/ bbc1efa4c..5eb3babb0 (147 commits)
• Fix one more edited PDF regression
• Update hooks for reclient
• Add one more pixel test for an edited PDF that regressed
• Roll clang to pick up unsafe_buffer_paths.txt format changes.
• Introduce fxcrt::try_spancpy() and fxcrt::try_spanmove().
• Roll v8/ 7f0739496..0832ba514 (553 commits; 1 trivial rolls)
• Roll buildtools and libc++
• Roll third_party/abseil-cpp/ a64dd87ce..2c1ad970d (2 commits)
• Roll third_party/fp16/src/ 0a92994d7..581ac1c79 (1 commit)
• Update gn_version to f284b6b47039a2d7edfcbfc51f52664f82b5a789
• Roll third_party/skia/ 7338f5521..04ee4daae (438 commits)
• Roll third_party/freetype/src/ f42ce2556..1168b1b5b (15 commits)
• Roll base/allocator/partition_allocator/ 8a9c3373f..3b0bd80fa (37 commits)
• Roll tools/rust/ eaff38a21..8fcf2bf39 (15 commits)
• Roll third_party/libc++abi/src/ 1317096ef..51fe35844 (2 commits)
• Update reclient_version to 0.138.0.e854224-gomaip
• Use spancpy() in more places
• Fix yet another edited PDF that regressed
• Introduce {Byte,Wide}String::span_with_terminator().
• Mark fx_memcpy_wrappers.h functions UNSAFE_BUFFER_USAGE.
• Enable fuzzing with Skia enabled
• Add yet another pixel test for an edited PDF that regressed
• Roll Code Coverage from f459fdcdfc6c to 1b0ca9db1266 (3 revisions)
• Roll Depot Tools from 4a9d989f52e9 to 4246ba023a15 (107 revisions)
• Roll libpng from 5140e80f1841 to 34954dfe60ef (2 revisions)
• Roll Instrumented Libraries from 0172d67d98df to 682a735d9f5c (18 revisions)
• Roll Catapult from 949df6114f3f to 5fbda23b3a86 (52 revisions)
• Roll Memory Tools from c6d669e13804 to 2448d81f9741 (1 revision)
• Roll abseil-cpp, buildtools, clang, and libc++

PDFium 126.0.6447.0

This version was built with branch chromium/6447 of PDFium

Changes

Commits between chromium/6406 and chromium/6447:

• Gate GDI APIs behind IsUser32AndGdi32Available in cpdf_interactiveform.cpp
• Deduplicate code in CPDF_Parser and rename some methods
• Fix parsing of PDFs with multiple cross reference streams
• Add another pixel test for an edited PDF that regressed
• Spanify CFX_SeekableStreamProxy
• Spanify FPDFText_GetText() and FPDF_GetBoundedText().
• Don't allow two-arg span constructor without UNSAFE_BUFFER() annotation.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in core/
• Put plugin-specific logic in pdfium_common_config.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in xfa/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in testing/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in fpdfsdk/
• Use new instrumented_libs repo
• Roll Zlib from c5bf1b566e5d to d076d8bd0898 (6 revisions)
• Roll build/ e5ff2eff3..e4eef53d5 (27 commits)
• Fix unsafe buffer usage in fxbarcode/datamatrix.
• Avoid some two-arg make_span() calls via extern spans.
• Fix unsafe buffer usage in (non-XFA) JS bindings.
• Fix some unsafe usage in cpdfdsk_{helpers,interactiveform}.cpp
• Roll v8/ f6f7c6822..7f0739496 (162 commits)

PDFium 125.0.6406.0

This version was built with branch chromium/6406 of PDFium

Changes

Commits between chromium/6392 and chromium/6406:

• Use the new v8 interceptor API
• Roll v8/ fe4ad3b98..f6f7c6822 (302 commits)
• Fix unsafe pointer usage in CJX_HostPseudoModel
• Fix typo in {Byte,Wide}StringView.TrimmedRight tests
• Avoid unsafe indexing in EncodeURL()
• Use WriteFloat() inside WriteColorToStream()
• Fix some unsafe buffer usage in CPDF_Dest.
• Mark one remaining unsafe function in core/fpdfapi/edit.
• Do not write out /Page objects that are not in the page tree
• Roll tools/rust/ 1d0018c65..eaff38a21 (6 commits)
• Roll third_party/skia/ 32f1cb507..7338f5521 (263 commits)
• Roll base/allocator/partition_allocator/ c702699cc..8a9c3373f (30 commits)
• Roll third_party/libc++abi/src/ fc6253a64..1317096ef (2 commits)
• Roll third_party/libunwind/src/ fc505746f..419b03c0b (2 commits)
• Update reclient_version to 0.134.1.2c9285b-gomaip
• Roll third_party/googletest/src/ e4fdb87e7..eff443c6e (7 commits)
• Roll third_party/freetype/src/ 2a790a9f4..f42ce2556 (4 commits)
• Change cfx_cmyk_to_srgb code to return struct FX_RGB
• Improve comments and naming in calculate_pitch.h
• Update gn_version to 93ee9b91423c1f1f53fb5f6cba7b8eef6247a564
• Roll Depot Tools from fbb0301f1f70 to 4a9d989f52e9 (81 revisions)
• Roll Code Coverage from 10ce382356ce to f459fdcdfc6c (9 revisions)

PDFium 125.0.6392.0

This version was built with branch chromium/6392 of PDFium

Changes

Commits between chromium/6378 and chromium/6392:

• Switch CPDF_MeshStream to use FX_RGB
• Add struct FX_RGB
• Add fpdfsdk/{pwl,formfiller,fpdfxfa}/ directories to unsafe buffers.
• Make SBThemeData::clrBtnBK a one-dimensional array.
• Remove FXSYS_wcstof in favor of system wcstof().
• Add some FPDFDocEmbedderTests that delete pages and save
• Enforce checking the return value of CFX_DIBitmap::Create()
• Put unsafe buffer configuration into PDFium
• Roll build/ e9a12f276..e5ff2eff3 (85 commits)
• Roll third_party/icu/ 1112fa6b3..d94ab131b (8 commits)
• Flag remaining unsafe buffer usage in fxcrt.
• Change CPDF_MeshStream::ReadColor() to return an array
• Fix undefined behavior in DrawGouraud()
• Fix some nits in DrawGouraud()
• Roll Catapult from 4dc7721a1444 to 949df6114f3f (83 revisions)
• Roll libpng from 3c7486b231c7 to 5140e80f1841 (1 revision)

PDFium 125.0.6378.0

This version was built with branch chromium/6378 of PDFium

Changes

Commits between chromium/6365 and chromium/6378:

• Remove Skia Sfntly dependency
• Remove more wide string literals.
• Remove some FXSYS_ functions in favor of std::char_traits<>.
• Simplify CFXJSE_NodeHelper::CreateNodeForCondition().
• Fix regression in coverage_report.py
• Set a default GN enable_safe_libstdcxx value
• Avoid a compiler compatibility issue with CPDF_DefaultAppearance