This version 126.0.6476 was built with branch chromium/6476 of PDFium

Changes

Commits between chromium/6350 and chromium/6476:

• Resolve unsafe buffer usage in cpdf_aaction.cpp and cpdf_action.cpp
• Fix unsafe buffer usage in xfa_basic_data.cpp
• Rework experimental FPDF_StructElement_Attr_* APIs
• Change FPDF_StructElement_Attr_* APIs to never return a reference
• Remove pragma unsafe_buffer_usage from CPDF_CMapParser.
• Remove #pragma allow_unsafe_buffers from cpdfsdk_appstream.cpp
• Narrow scope of UNSAFE_BUFFERS() in fpdfsdk/fpdf*.cpp
• Resolve unsafe buffer usage in CPDF_PSEngine
• Remove <string.h> inclusion from {Byte,Wide}String headers.
• Remove spurious includes of <string.h>.
• Remove file-wide unsafe_buffers pragmas from fpdfsdk/fpdf*.cpp
• Remove memcpy() from fpdfsdk/fpdf*.cpp (non-test files).
• Move pdfium_test.cc from samples/ to testing/
• Fix return of span_with_terminator() for empty string.
• Explain FPDFPage_RemoveObject() side effect on FPDF_TEXTPAGE handles
• Split off aes/sha headers from fx_crypt.h
• Roll third_party/googletest/src/ eff443c6e..fa6de7f43 (18 commits)
• Mass convert memmove() to FXSYS_memmove().
• Remove code that assumes CPDF_PageObjectHolder contains nullptrs
• Mass convert memset() to FXSYS_memset().
• Add fxcrt::Fill()
• Convert some memset(x, 0, sz) calls to aggregate initializations.
• Mass convert memcpy() to FXSYS_memcpy().
• Convert to std::array<> in CPDF_SimpleFont.
• Use #pragma allow_unsafe_buffers, not pdfium_unsafe_buffers_paths.txt
• Convert to std::array in cmaps/.
• Convert to extern std::array<> in /chromefontdata.
• Roll buildtools/clang_format/script/ e5337933f..3c0acd2d4 (23 commits)
• Roll Zlib from d076d8bd0898 to 7d77fb7fd66d (3 revisions)
• Roll build/ bbc1efa4c..5eb3babb0 (147 commits)
• Fix one more edited PDF regression
• Update hooks for reclient
• Add one more pixel test for an edited PDF that regressed
• Roll clang to pick up unsafe_buffer_paths.txt format changes.
• Introduce fxcrt::try_spancpy() and fxcrt::try_spanmove().
• Roll v8/ 7f0739496..0832ba514 (553 commits; 1 trivial rolls)
• Roll buildtools and libc++
• Roll third_party/abseil-cpp/ a64dd87ce..2c1ad970d (2 commits)
• Roll third_party/fp16/src/ 0a92994d7..581ac1c79 (1 commit)
• Update gn_version to f284b6b47039a2d7edfcbfc51f52664f82b5a789
• Roll third_party/skia/ 7338f5521..04ee4daae (438 commits)
• Roll third_party/freetype/src/ f42ce2556..1168b1b5b (15 commits)
• Roll base/allocator/partition_allocator/ 8a9c3373f..3b0bd80fa (37 commits)
• Roll tools/rust/ eaff38a21..8fcf2bf39 (15 commits)
• Roll third_party/libc++abi/src/ 1317096ef..51fe35844 (2 commits)
• Update reclient_version to 0.138.0.e854224-gomaip
• Use spancpy() in more places
• Fix yet another edited PDF that regressed
• Introduce {Byte,Wide}String::span_with_terminator().
• Mark fx_memcpy_wrappers.h functions UNSAFE_BUFFER_USAGE.
• Enable fuzzing with Skia enabled
• Add yet another pixel test for an edited PDF that regressed
• Roll Code Coverage from f459fdcdfc6c to 1b0ca9db1266 (3 revisions)
• Roll Depot Tools from 4a9d989f52e9 to 4246ba023a15 (107 revisions)
• Roll libpng from 5140e80f1841 to 34954dfe60ef (2 revisions)
• Roll Instrumented Libraries from 0172d67d98df to 682a735d9f5c (18 revisions)
• Roll Catapult from 949df6114f3f to 5fbda23b3a86 (52 revisions)
• Roll Memory Tools from c6d669e13804 to 2448d81f9741 (1 revision)
• Roll abseil-cpp, buildtools, clang, and libc++
• Gate GDI APIs behind IsUser32AndGdi32Available in cpdf_interactiveform.cpp
• Deduplicate code in CPDF_Parser and rename some methods
• Fix parsing of PDFs with multiple cross reference streams
• Add another pixel test for an edited PDF that regressed
• Spanify CFX_SeekableStreamProxy
• Spanify FPDFText_GetText() and FPDF_GetBoundedText().
• Don't allow two-arg span constructor without UNSAFE_BUFFER() annotation.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in core/
• Put plugin-specific logic in pdfium_common_config.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in xfa/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in testing/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in fpdfsdk/
• Use new instrumented_libs repo
• Roll Zlib from c5bf1b566e5d to d076d8bd0898 (6 revisions)
• Roll build/ e5ff2eff3..e4eef53d5 (27 commits)
• Fix unsafe buffer usage in fxbarcode/datamatrix.
• Avoid some two-arg make_span() calls via extern spans.
• Fix unsafe buffer usage in (non-XFA) JS bindings.
• Fix some unsafe usage in cpdfdsk_{helpers,interactiveform}.cpp
• Roll v8/ f6f7c6822..7f0739496 (162 commits)
• Use the new v8 interceptor API
• Roll v8/ fe4ad3b98..f6f7c6822 (302 commits)
• Fix unsafe pointer usage in CJX_HostPseudoModel
• Fix typo in {Byte,Wide}StringView.TrimmedRight tests
• Avoid unsafe indexing in EncodeURL()
• Use WriteFloat() inside WriteColorToStream()
• Fix some unsafe buffer usage in CPDF_Dest.
• Mark one remaining unsafe function in core/fpdfapi/edit.
• Do not write out /Page objects that are not in the page tree
• Roll tools/rust/ 1d0018c65..eaff38a21 (6 commits)
• Roll third_party/skia/ 32f1cb507..7338f5521 (263 commits)
• Roll base/allocator/partition_allocator/ c702699cc..8a9c3373f (30 commits)
• Roll third_party/libc++abi/src/ fc6253a64..1317096ef (2 commits)
• Roll third_party/libunwind/src/ fc505746f..419b03c0b (2 commits)
• Update reclient_version to 0.134.1.2c9285b-gomaip
• Roll third_party/googletest/src/ e4fdb87e7..eff443c6e (7 commits)
• Roll third_party/freetype/src/ 2a790a9f4..f42ce2556 (4 commits)
• Change cfx_cmyk_to_srgb code to return struct FX_RGB
• Improve comments and naming in calculate_pitch.h
• Update gn_version to 93ee9b91423c1f1f53fb5f6cba7b8eef6247a564
• Roll Depot Tools from fbb0301f1f70 to 4a9d989f52e9 (81 revisions)
• Roll Code Coverage from 10ce382356ce to f459fdcdfc6c (9 revisions)
• Switch CPDF_MeshStream to use FX_RGB
• Add struct FX_RGB
• Add fpdfsdk/{pwl,formfiller,fpdfxfa}/ directories to unsafe buffers.
• Make SBThemeData::clrBtnBK a one-dimensional array.
• Remove FXSYS_wcstof in favor of system wcstof().
• Add some FPDFDocEmbedderTests that delete pages and save
• Enforce checking the return value of CFX_DIBitmap::Create()
• Put unsafe buffer configuration into PDFium
• Roll build/ e9a12f276..e5ff2eff3 (85 commits)
• Roll third_party/icu/ 1112fa6b3..d94ab131b (8 commits)
• Flag remaining unsafe buffer usage in fxcrt.
• Change CPDF_MeshStream::ReadColor() to return an array
• Fix undefined behavior in DrawGouraud()
• Fix some nits in DrawGouraud()
• Roll Catapult from 4dc7721a1444 to 949df6114f3f (83 revisions)
• Roll libpng from 3c7486b231c7 to 5140e80f1841 (1 revision)
• Remove Skia Sfntly dependency
• Remove more wide string literals.
• Remove some FXSYS_ functions in favor of std::char_traits<>.
• Simplify CFXJSE_NodeHelper::CreateNodeForCondition().
• Fix regression in coverage_report.py
• Set a default GN enable_safe_libstdcxx value
• Avoid a compiler compatibility issue with CPDF_DefaultAppearance
• Convert some WideString::CompareNoCase() to EqualsASCIINoCase().
• Replace ptr/size pair with span in FXJSE_CLASS_DESCRIPTOR.
• Remove in-out parameter from GetFontFamily.
• Enable UNOWNED_PTR_EXCLUSION checks for debug builds only.
• Adjust BUILD.gn files for path-based unsafe buffer warnings.
• Remove another parameter from CPDF_AnnotList methods
• Avoid calls to c_str() in cpdf_filespec.cpp.
• Avoid duplicate checks in StringViewTemplate<>::Substr().
• Remove dead code in RenderPageImpl() callees
• Improve generated content stream data in cpdf_generateap.cpp
• Make FPDFAnnotEmbedderTest.Bug1206 resiliant to changes
• Remove use of string to hold binary data in cgdi_device_driver.cpp.
• Move some fx_system.h replacements into a C++ only section.
• Add script to fetch images from pdfium-skia gold server
• Change scripts to use autoninja
• Roll third_party/skia/ 532505396..32f1cb507 (200 commits)
• Increase internal precision in FXSYS_wcstof().
• Generate more legal content stream data in CPDF_GenerateAP
• Roll build, clang, and rust tools
• Properly account for CTM changes
• Remove unreachable TranslateImageLine() colorspace code
• Roll abseil, buildtools, and libc++
• Rename CPDF_Color::GetRGB() to GetColorRef()
• Rename CPDF_PatternCS::GetPatternRGB() to GetPatternColorRef()
• Roll third_party/googletest/src/ af29db7ec..e4fdb87e7 (411 commits)
• Demonstrate PDF saving bug with a "leaky" CTM
• Roll base/allocator/partition_allocator/ c2bb1848e..c702699cc (26 commits)
• Roll Zlib from 3787595bbbd3 to c5bf1b566e5d (4 revisions)
• Roll Memory Tools from 4753a8cbcd7c to c6d669e13804 (2 revisions)