PDFium 129.0.6666.0

This version was built with branch chromium/6666 of PDFium

Changes

Commits between chromium/6611 and chromium/6666:

• Use EmbedderTest::LoadScopedPage() in test files
• Refactor CPDF_SimpleParser part 4
• Refactor CPDF_SimpleParser part 3
• Add CPDF_SimpleParser edge case tests
• Refactor CPDF_SimpleParser part 2
• Refactor CPDF_SimpleParser names
• Rename FXDIB_Format enum values to better match public values
• Use safe math in FPDF_FileHandlerContext::ReadBlockAtOffset()
• Remove IFX_SeekableStream::ReadBlock()
• Use safe math in FPDF_FileHandlerContext::WriteBlock()
• Avoid creating FPDF_FileHandlerContext with null handler
• Move xfa/fwl code into namespace pdfium
• Use std::make_unique() in CFWL_ScrollBarTP
• Move xfa/fwl/theme code into namespace pdfium
• Move xfa/fde code into namespace pdfium
• Mark end of exhaustive switch statements in CPDF_CMap as unreachable
• Remove FileAccessIface::WritePos()
• Remove IFX_SeekableWriteStream::WriteBlock()
• Simplify IFX_SeekableWriteStream::WriteBlockAtOffset()
• Rename CPDF_TextState member variables
• Add unit test for ArgbToBGRAStruct()
• Remove pdfium::arabic namespace
• Modernize some std::min/max() calls
• Adjust font fallback code to prefer embedded fonts
• Remove spurious BC_CommonBitMatrix.h includes
• Fix UNSAFE_TODOs in fx_skia_device.cpp
• Avoid divide by zero in CFX_ImageTransformer
• Remove UNSAFE_TODO in some public API implementations
• Add unit test for SimpleParserTest regression
• Remove CFX_ScanlineCompositor::m_bClip
• Clean up GenerateBorderAP()
• Remove UNSAFE_TODO in FPDF_ImportPagesByIndex()
• Refactor CPDF_Color to use absl::variant for colorspaces
• Rename AlphaMerge() to AlphaMergeToDest() in cfx_scanlinecompositor.cpp
• Roll goldctl from f05cc7ed060e to f469d8180954
• Roll Catapult from 7534569f9982 to 2ebd180cb2e8 (48 revisions)
• Roll libpng from 34954dfe60ef to 68c9960bdc0a (1 revision)
• Add API to set document language in PDF document
• Use even more spans in fx_crypt_aes.cpp
• Spanify Revision6_Hash() arguments.
• Make CPDF_ScaledRenderBuffer Windows-only
• Reorganize common code in CompositePixelArgb2Argb functions
• Move some arguments from CPDF_ScaledRenderBuffer::Initialize() to ctor
• Mark parts of CPDF_RenderStatus::CompositeDIBitmap() as Windows-only
• Rename CPDF_ScaledRenderBuffer member variables
• Rename some "bpp" variables to "bytes_per_pixel"
• Move test-only code out of fx_coordinates.cpp and into a support target
• Make CFX_DIBitmap::GetScanlineAs() work correctly for 24-bpp bitmaps
• Simplify parameters in CFX_AggRenderer composite scanline methods
• Reduce float usage inside cpdf_generateap.cpp
• Remove 1 BPP support from cfx_agg_devicedriver.cpp
• Check FXDIB_Format::kArgbPremul in CFX_DIBBase::IsPremultiplied()
• Use FXDIB_ALPHA_UNION() in more places in cfx_scanlinecompositor.cpp
• Avoid unreachable code in CPDF_Image::ConvertStreamToIndirectObject()
• Fix a typo in CompositeRow_Rgb2Gray()
• Get rid of UNSAFE_TODOs in ARGB to 8 BPP CompositeRow functions
• Get rid of CompositeRowArgb2RgbNoBlend()
• Get rid of UNSAFE_TODOs in CompositeRow_Argb2Argb()
• Get rid of UNSAFE_TODOs in CompositeRow_Argb2Rgb* functions
• Add a RGB_Blend() variant
• Add 2 input / 1 output Zip() variant
• Add a return type to FPDFBitmap_FillRect()
• Remove underscores from test names in fxjs/
• Remove underscores from test names in fpdfsdk/
• Mark CFX_DefaultRenderDevice Create methods with [[nodiscard]]
• Add unit tests for CPDF_Number::WriteTo()
• Add some kArgbPremul support to CFX_DIBBase::ConvertBuffer()
• Check for integer overflows in FPDFBitmap_FillRect()
• Fix UNSAFE_TODOs in RgbByteOrderTransferBitmap()
• Add UnPreMultiplyColor()
• Add special FPDFBitmap_FillRect() handling for 24 and 32 BPP bitmaps
• Add CFX_DIBitmap::ScopedPremultiplier
• [Add more TODOs for switching to FXDIB_Format::kArgbPremul](https:...

PDFium 128.0.6611.0

This version was built with branch chromium/6611 of PDFium

Changes

Commits between chromium/6569 and chromium/6611:

• Rename CFX_BitmapComposer to CFX_AggBitmapComposer
• Move CFX_BitmapComposer to core/fxge/agg
• Rename CFX_ImageRenderer to CFX_AggImageRenderer
• Move CFX_ImageRenderer to core/fxge/agg
• Introduce FixedSizeDataVector<>::TruncatedFrom().
• Remove out-parameter from RenderDeviceDriverIface::StartDIBits()
• Introduce FixedSizeDataVector<>::TryUninit()
• Remove public/ from list of suppressed unsafe_buffers directories,
• Tidy CFX_SkiaDeviceDriver
• Consolidate some test expectations inside fpdf_edit_embeddertest.cpp
• Roll v8/ 45bb39566..270b6f4e1 (450 commits)
• Use FPDF_StructElement_GetMarkedContentIdAtIndex() in pdfium_test
• Fix failing embedder tests on Mac ARM64
• Avoid UNSAFE_TODO in CPDF_ImageRenderer
• Remove one UNSAFE_TODO() in CFX_Palette::CFX_Palette()
• Add FPDFPageObj_GetMarkedContentID() API
• Add EmbedderTest::LoadScopedPage()
• Replace one usage of GetRGBOrZerosOnError().
• Clean up EmbedderTest
• Rework UNSAFE_TODO() in CPDF_{LabCS,CalGray}::TranslateImageLine().
• Short-circuit CHECK() in reinterpret_span<>().
• Avoid allocating temporary strings in fpdf_{flatten,ppo}.cpp
• Rename FPDFFont_GetFontName() to FPDFFont_GetFamilyName()
• Remove CFX_Font::GetFaceName()
• Remove UNSAFE_TODO() from CPDF_CalRGB::v_Load()
• Add missing explicit keyword in string_view_template.h
• Remove UNSAFE_TODO() in core/fpdfapi/page/cpdf_transferfuncdib.cpp
• Do IWYU for <limits.h>
• Avoid UNSAFE_TODO when making wide strings from C-style binary arrays.
• Add FPDFText_GetTextObject() API
• Add a SkCanvas::drawPath() wrapper in CFX_SkiaDeviceDriver
• Rename variables in fpdf_ppo.cpp
• Avoid UNSAFE_TODO when making strings from C-style binary arrays.
• Use Google C++ variable names in CPDF_TransferFuncDIB
• Simplify format calculation in cpdf_dib.cpp
• Reduce scope of more UNSAFE_TODOs in dib code
• Remove or reduce scope of UNSAFE_TODOs in dib code
• Add MS fonts to the Linux Japanese font substitution list
• Fix kLinuxJpFontTable row vs. column size confusion
• CHECK() two CPDF_DocRenderData methods receive non-null arguments
• Avoid applying alpha multiple times
• Consistently use typename in zip.h
• Remove some unneeded STL includes
• Fix C++17 build issue with FS_MATRIX construction
• Roll Catapult from 68fe632a004e to 7534569f9982 (66 revisions)
• Roll goldctl from 9ce18dfea456 to 19f0de676cd5
• Add FPDFPageObj_TransformF() API
• Rename CFX_DIBBase members to use Google C++ style names
• Make CFX_DIBBase dimension variables private
• Make CFX_DIBBase::m_Format private
• Remove most GetBppFromFormat() calls from CFX_DIBBase and subclasses
• Add a pixel test for /TR
• Update FPDFImageObj_GetRenderedBitmap matrix processing.
• Avoid float-cast-overflow in IccTransform::Translate
• Updating FP16's README.chromium to include Revision
• Consolidate XFA color printing code to CFGAS_GEColor::ColorToString()
• Make Android font manager respect m_pUserFontPaths
• Rename and reformat CFPF_SkiaFontMgr code
• Use absl::variant inside fx_agg_driver.cpp
• Convert some reinterpret_span<>() to GetScanlineAs<>().
• Replace ArgbDecode() with ArgbToRGBAStruct()
• Make all reinterpret_span<>() be truncating.
• Remove UNSAFE_TODO() in fxge/apple/fx_quartz_device.cpp
• Remove UNSAFE_TODO() from CFX_DIBitmap::Clear()
• Add simpler CFX_DefaultRenderDevice::Create()
• Use even more switch statements in CFX_ScanlineCompositor
• Use fxcrt::Zip() in CPDF_DIB::LoadJpxBitmap()
• Implement fxcrt::Zip<>().
• Add unified "goldctl_version" git_revision tag
• Use more switch statements in CFX_ScanlineCompositor
• Roll goldctl
• Remove some default cases from switch statements
• [Check if bitmaps are premultiplied in CFXDIBitmapTest cases](https://pdfium.googlesource.com/pdfium/+/01212aa98e00ae6cb640c9aa2...

PDFium 128.0.6569.0

This version was built with branch chromium/6569 of PDFium

Changes

Commits between chromium/6555 and chromium/6569:

• Roll buildtools/, third_party/abseil-cpp/, and third_party/libc++/src/
• Add Revision fields for some 3P libs
• Remove UNSAFE_TODO in GetUnicodeNormalization().
• Add missing forms of as_byte_span().
• Simplify some span usage.
• Use static subspan<>() methods when we have a static span argument.
• Build Fontations dependencies
• Checkout rust toolchain using DEPS entries instead of hooks
• Remove underscores from test names with the pattern "BUG_NUMBER"
• Add static_asserts to pdfium::span templated first(), last(), subspan().
• Add fixed-span forms of First(), Last(), Subspan()
• Narrow scope of UNSAFE_TODO() in SkFloatToDecimal().
• Use more spans in CPDF_CryptoHandler::EncryptContent()
• Use span arguments in fx_crypt md5 code
• Spanify CRYPT_AESEncrypt() to remove a UNSAFE_TODO()
• Simplify CPDF_CryptoHandler::EncryptContent()
• Remove static Create() helper methods from String Views
• Roll tools/rust/ 8fcf2bf39..b40b86555 (18 commits)
• Update reclient_version to 0.148.0.41b09b51-gomaip
• Roll v8/ 070022ab5..45bb39566 (262 commits)
• Roll third_party/skia/ 51eabd0d1..173ee0af8 (157 commits)
• Roll build/ e37c3970d..f278887ec (59 commits)
• Roll base/allocator/partition_allocator/ 7864cdced..45a05505a (14 commits)
• Roll third_party/freetype/src/ 7ff43d3e9..bab9564a9 (10 commits)
• Return DataVector directly from CPDF_CryptoHandler::EncryptContent()
• Roll third_party/libunwind/src/ ab43b1d3c..dcc1ffafb (2 commits)
• Roll third_party/libc++abi/src/ c5d2b1886..bac941ca4 (4 commits)
• Fix C++17 compiler issue
• Spanify GIFDecoder palette.
• Update gn_version to b2afae122eeb6ce09c52d63f67dc53fc517dbdc8
• Roll third_party/googletest/src/ 305e5a238..1d17ea141 (2 commits)
• Spanify struct DecodeData constructor.
• Remove static Create() helper methods from Strings.
• Filter out bad font base encodings when flattening
• Roll tools/clang/ fa1d00625..7637a9e02 (24 commits)
• Fix build errors prior to roll of new compiler.
• Rework UNSAFE_BUFFERS in CPDF_CryptoHandler::EncryptContent().
• Add replacements for FPDF_GetDefaultTTFMap() API
• Replace spancpy() with fxcrt::Copy() where possible.
• Cherry-pick OpenJPEG patches to fix non-strict mode buffer overflows
• Avoid integer overflow in CFX_Font::GetBBox()
• Convert byteorder.h to use fixed-size span arguments.
• Add FPDFFlattenEmbedderTest.FlatWithBadFont
• Add strict_mode parameter to CJPX_Decoder::Create()
• Remove underscores from test names
• Make CJPX_Decoder::ColorSpaceOption an enum class
• Replace SkPackARGB32NoCheck with SkPackARGB32
• Introduce fxcrt::Copy().
• Retire fxcrt::spanset() and fxcrt::spanclr().
• [clang-plugin] Use -plugin-arg-raw-ptr-plugin for raw-ptr check.
• Roll Depot Tools from 7d95eb2eb054 to 6daca505974e (83 revisions)
• Roll Code Coverage from bfffc566bf0a to 306c68de9c9b (2 revisions)

PDFium 128.0.6555.0

This version was built with branch chromium/6555 of PDFium

Changes

Commits between chromium/6541 and chromium/6555:

• Fix how NamedPropertySetterCallback returns result
• Fix some typos in //public
• Reformat comments in //public to use a consistent syntax
• Return vector from from CRYPT_SHA*Generate() functions.
• Spanify CRYPT_SHA384* and CRYPT_SHA512*
• Add FPDFAnnot_GetFontColor API
• Spanify CalcEncryptKey, CRYPT_SHA1* and CRYPT_SHA256*
• Add Revision field to third_party/NotoSansCJK/README.pdfium
• Avoid UNSAFE_BUFFERS in CPDFSDK_AppStream
• Revert "Do not use strict mode when decoding JPEG2000 images"
• Add GetWidgetOfTypes() helper inside fpdf_annot.cpp
• Convert FXSYS_wcstof() to take a WideStringView argument.
• Avoid unsafe buffer usage in fpdf_sysfontinfo.cpp
• Remove CPDF_CrossRefTable::ObjectType::kNull
• Remove dead code in CPDF_Parser::ProcessCrossRefStreamEntry()
• Do not hard code the generation number in CPDF_CrossRefTable::SetFree()
• Avoid two-arg ByteStringView in CPDF_CIDFont [win only]
• Avoid reinterpret span when casting to bytes
• Resolve unsafe buffer warnings in CFX_GlyphCache.
• Add a pixel test for yet another edited PDF that regressed
• Make CPDF_PageLabel::GetLabel() faster
• Implement CPDF_Color::GetRGB()
• Avoid UNSAFE_BUFFER usage in CPDF_SyntaxParser.
• Update buffer safety comments in fx_extension.cpp.
• Return DataVector<uint8_t> from CPDF_StreamAcc::ComputeDigest().
• Add unit tests for CPDF_PageLabel
• Rename variable in CPDF_NumberTree code to follow Google C++ style
• Fix nits in cpdf_pagelabel.cpp
• Rename variable in CPDF_PageLabel code to follow Google C++ style
• Remove out parameters from CPDF_ColorSpace::GetRGB().
• Roll Catapult from 1bce0121e31e to 68fe632a004e (47 revisions)

PDFium 128.0.6541.0

This version was built with branch chromium/6541 of PDFium

Changes

Commits between chromium/6531 and chromium/6541:

• Rename member variables in CPDF_Color to follow Google C++ Style
• Add in-header per-member zero initializers to FX_*_STRUCT templates.
• Roll base/allocator/partition_allocator/ f61289829..7864cdced (24 commits)
• Add a pixel test for a mask rendering bug
• Roll build/ 35d048bc1..e37c3970d (34 commits)
• Roll tools/clang/ 92d8405e4..fa1d00625 (12 commits)
• Roll build/ 514a14f54..35d048bc1 (41 commits)
• Fix UNSAFE_TODOs in several unit tests
• Allow Grayscale Colorspaces for Bug 42271133
• Spanify fxcodec::ReverseRGB().
• Fix UNSAFE_TODO() usage int GetAP_Check()
• Fix computation of y in GetAP_Check().
• Make some CFGAS_PDFFontMgr methods into anonymous functions
• Mark CFX_Matrix ctors as constexpr, and delete test-only ctor
• Remove m_LeadingSegCount field from struct PredefinedCMap
• Convert 2-dimensional C-style arrays to std::array<>.
• Re-write CPDF_CMap to avoid UNSAFE_TODO() sections.
• Virtualize ByteString variant of CPDF_Font::AppendChar().
• Checkout clang using DEPS entries instead of hooks
• Fix a typo in testing/resources/pixel/type3.in
• Mark another libtiff CVE as mitigated
• Roll v8 and build
• Rework UNSAFE_TODO() where std::array<> conversion is viable.
• Avoid another call to free resources during CPDF_Document destruction
• Restore previous transparency rendering behavior
• Roll third_party/skia/ ba0db3c0a..51eabd0d1 (249 commits; 1 trivial rolls)
• Rewrite comments in CJPX_Decoder::StartDecode()
• Tolerate extra JPEG2000 image channels in CPDF_DIB::LoadJpxBitmap()
• Use std::unique_ptr in CJPX_Decoder
• Avoid UNSAFE_TODO() in CPDF_Bookmark.
• Remove last usage of #pragma allow_unsafe_buffers
• Add test for colorspace handling of regenerated streams
• Remove some UNSAFE_TODOs in CFX_DIBitmap
• Avoid a few UNSAFE_TODO()s in CPDF_CIDFont.
• Avoid unsafe iteration and string construction in cpdf_font.cpp
• Avoid addition calls to free resources during CPDF_Document destruction
• Mass suppress unsafe buffers in fxge drivers.
• Mark large sections of core/fxcodec UNSAFE_TODO()
• Remove CPDF_PSEngine::num_operators().
• Continue with still even more unsafe_buffer suppressions in tests
• Continue with suppressions unsafe_buffers in (barcode) test files.
• Remove even more per-file suppressions from tests.
• Remove UNSAFE_TODOs in CPDF_DIB::LoadJpxBitmap()
• Mark large sections of cfxjse_formcalc_context.cpp as UNSAFE_TODO().
• Mass suppress unsafe buffers in fxge/dib.
• Mark large sections of jbig2 UNSAFE_TODO()
• Remove more per-file suppressions in tests.
• Modernize some unit tests to use EXPECT_THAT(..., ElementsAre())
• Avoid invoking span() directly on char literals.
• Suppress per-file warnings in fx_freetype.cpp.
• Roll Jinja2 from c9c77525ea20 to 2f6f2ff5e4c1 (1 revision)

PDFium 127.0.6531.0

This version was built with branch chromium/6531 of PDFium

Changes

Commits between chromium/6517 and chromium/6531:

• Correctly handle image transparency in path objects
• Add tests for pdfium::span<> interoperability with gmock macros.
• Restore JPEG2000 colorspace mismatch handling workaround
• Mark two-arg WideString() constructor as UNSAFE_BUFFER_USAGE.
• Mark more two-arg fxcrt functions as UNSAFE_BUFFER_USAGE.
• Spanify FileAccessIface.
• Use the term "Binding" in place of "Private" in fxjs/.
• Rename FXJS_PerIsolateData to CFXJS_PerIsolateData.
• Do less work in JSGetObject()
• Mark two-arg ByteString() constructor as UNSAFE_BUFFER_USAGE.
• Enforce unsafe buffers on 2-arg StringViewTemplate constructor.
• Loosen palette check in FPDFImageObj_GetBitmap()
• Roll build/ 01e3c73f5..5b8c05aed (80 commits)
• Fix/Mark unsafe buffer regions is CJPX_Decoder
• Roll buildtools and libc++
• Remove calls to v8::FunctionCallbackInfo::Holder()
• Tidy some types in fxcodec/bmp.
• Resolve/mark unsafe regions in CFX_BmpDecompressor.
• Spanify usage of JBig2ArithCtx in fxcodec/jbig2
• Mark fxcodec::ReverseRGB() as UNSAFE_BUFFER_USAGE.
• Roll third_party/libunwind/src/ 419b03c0b..ab43b1d3c (7 commits)
• Roll third_party/libc++abi/src/ 51fe35844..c5d2b1886 (11 commits)
• Roll DEPS for abseil and clang
• Fix inconsistent return value from GetLiteralText().
• Resolve unsafe buffers warnings in blend.cpp
• Avoid safe numerics underflow trap in CJBig2_BitStream::getByteLeft().
• Roll Memory Tools from 2448d81f9741 to c5b623b3ba22 (1 revision)
• Roll Zlib from 7d77fb7fd66d to 209717dd69cd (3 revisions)
• Roll Instrumented Libraries from 682a735d9f5c to 1d704cadac0d (76 revisions)

PDFium 127.0.6517.0

This version was built with branch chromium/6517 of PDFium

Changes

Commits between chromium/6504 and chromium/6517:

• Remove CPDF_IndexedCS::base_component_count_
• Change CPDF_IndexedCS::lookup_table_ to a DataVector
• Begin replacing some v8 info.Holder() with info.This().
• Convert CPDF_IndexedCS::component_min_max_ to a struct
• Validate CPDF_IndexedCS::max_index_
• Rename CPDF_IndexedCS member variables
• Avoid some two-arg {Byte,Wide}StringView constructors.
• Fix unsafe buffer usage in fx_linux_impl.cpp
• Fix unsafe buffer warnings in cfx_dibbase_skia.cpp
• Fix unsafe buffers in android/skia fxge file.
• Fully switch from ObservePtr to RetainPtr in CPDF_DocPageData
• Fix unsafe buffer usage in CPDF_RenderShading
• Fix unsafe-buffer usage in CXFA_ContentLayoutProcessor
• Convert to std::array<> in CXFA_ContentLayoutProcessor.
• Remove per-file unsafe_buffer suppression for fxge/win32 files.
• Remove per-file unsafe_buffer suppression from several fxge files.
• Remove file-wide unsafe-buffers suppression from cxfa_fmlexer.cpp,
• Fix/Mark unsafe buffers in {fax,flate,jpg}module.cpp
• Relax JPX colorspace check in GetJpxDecodeActionFromColorSpaces()
• Fix unsafe buffer issues in fxcodec/gif
• Upgrade OpenJPEG to 2.5.2
• Fix or mark some unsafe code in fxcoded/jbig2
• Update gn_version to 70844c8af4f604899281261be414b8c113fcbbf0
• Roll v8/ a9dc62b2c..317778857 (235 commits)
• Fix OOB access inside CBC_PDF417
• Mark unsafe regions in core/fxge/apple
• Add minor static assert for fixed-size spans.
• Fix unsafe code in fx_crypt_sha.cpp or mark unsafe regions.
• Fix unsafe code in fx_crypt_aes.cpp or mark unsafe regions
• Fix unsafe code in fx_crypt.cpp and mark remaining regions.
• Roll third_party/skia/ 04ee4daae..ba0db3c0a (302 commits)
• Spanify a few more APIs away from discrete size parameters.
• Roll third_party/freetype/src/ 1168b1b5b..7ff43d3e9 (37 commits)
• Mark unsafe buffer regions in CPDF_DIB and CPDF_TransferFuncDIB.
• Roll base/allocator/partition_allocator/ 17c0ead1e..f61289829 (8 commits)
• Resolve unsafe buffer usage in fxbarcode/qrcode/.
• Roll third_party/googletest/src/ fa6de7f43..305e5a238 (4 commits)
• Roll third_party/icu/ d94ab131b..98f249451 (1 commit)
• Convert kQRCoderECBDataTable to std::array<>.
• Mark (large) unsafe region in cfx_globaldata.cpp
• Remove class CBC_QRCoderECBlocks.
• Roll third_party/libjpeg_turbo/ 9b894306e..ccfbe1c82 (1 commit)
• Roll Depot Tools from 4246ba023a15 to 7d95eb2eb054 (134 revisions)
• Roll Code Coverage from 1b0ca9db1266 to bfffc566bf0a (3 revisions)

PDFium 127.0.6504.0

This version was built with branch chromium/6504 of PDFium

Changes

Commits between chromium/6490 and chromium/6504:

• Remove BUG_PREFIX from codereview.settings
• Avoid uninit value in CBC_PDF417I::Encode()
• Mark unsafe regions in cfgas_gegraphics.cpp.
• Do not use strict mode when decoding JPEG2000 images
• Fix unsafe buffer usage in fxbarcode/oned
• Fix unsafe regions in fxbarcode/pdf417/
• Mark unsafe_buffer regions in fgas/{crt,font}
• Remove unused RetainPtr::BackPointer()
• Mark unsafe regions in fgas/layout files.
• Mark unsafe regions in core/fpdfapi files.
• Spanify methods in BC_OneDimWriter
• Use fxcrt:ToArray<>() in more places.
• Rename CPDF_String variables
• Roll base/allocator/partition_allocator/ 0e650666e..17c0ead1e0f8 (14 commits)
• Take std::to_array<>() equivalent from chromium base.
• Fix a regression in linearized PDFs that have been edited
• Mark unsafe_buffers region in many fpdfapi/page files
• Fix unsafe usage in CPDF_StreamContentParser
• Mark unsafe_buffers regions in core/fpdfapi/font files.
• Mark unsafe_buffers sections in core/fpdfdoc/ non-test files
• Mark unsafe regions in CFGAS_Decimal implementation
• Use safe string operations in CFGAS_Decimal.
• Fix unsafe buffer in CPDF_StreamParser
• Avoid CPDF_String instantiation in FPDFAttachment_GetStringValue()
• Fix crashes in FPDFAttachment_GetStringValue()
• Replace 3-parameter CPDF_String ctor
• Fix regression in CFX_AggDeviceDriver::SetClipMask()
• Add a 2-parameter CPDF_String ctor
• Ensure FixedSizeDataVector contains only data
• Make CFX_CodecMemory XFA-only
• Relax pdfium_test assertion for not depending on gtest
• Remove unneeded core/fxcrt/fx_memory_wrappers.h includes
• Rename DataVectorAndBytesConsumed to DataAndBytesConsumed
• Convert FlateUncompress() to return DataVectorAndBytesConsumed instead
• Change CFX_FolderFontInfo to use FixedSizeDataVector
• Fix unsafe buffer usage in core/fxge/dib/cfx_cmyk_to_srgb.cpp.
• Introduce more helpful FX_*_STRUCT classes.
• Remove unnecessary encode/decode inside FPDFAttachment_SetFile()
• Remove unused includes from {byte,wide}string.h
• Avoid invoking methods directly against observed this.
• Change PDFDataDecodeResult to use DataVector
• Defensive programming around ObservedPtr<CPDFSDK_Annot>().
• Once this observed, only access members through observed ptr.
• Avoid depending on gtest in scoped_locale.cc
• Change FlateOrLZWDecode() to return DataVectorAndBytesConsumed
• Return DataVector from PNG_Predictor()
• Change CLZWDecoder to use DataVector
• Move switches out of inner loop in FlatePredictorScanlineDecoder
• Get rid of extra byte allocated in FlateUncompress()
• Use more spans inside flatemodule.cpp
• Roll Catapult from 5fbda23b3a86 to 1bce0121e31e (52 revisions)

PDFium 127.0.6490.0

This version was built with branch chromium/6490 of PDFium

Changes

Commits between chromium/6476 and chromium/6490:

• Use FixedSizeDataVector instead of DataVector in cpdf_creator.cpp
• Once observed, stop using underlying raw members.
• Remove out-parameters from PNG_Predictor()
• Call PNG_PredictLine() from PNG_Predictor()
• Take advantage of spans more in PNG_Predictor()
• Adjust PNG_PredictLine() parameters
• Refactor identical code in PNG_PredictLine() and PNG_Predictor()
• Move switches out of inner loops in PNG_PredictLine() / PNG_Predictor()
• Observe widgets earlier in CFFL_{Combo,List}Box::SaveData().
• Use only spans in PNG_PredictLine() and PNG_Predictor()
• Change TIFF_PredictLine() to take a span
• Grab clang-format and linux sysroots using recursivedeps
• Stop using deprecated v8::ObjectTemplate::SetAccessor()
• Rename template FX_RGB to FX_RGB_STRUCT.
• Split input and output parameters for PNG_Predictor()
• Change TIFF_Predictor() to have a span parameter
• Remove out-parameters from PDF_DataDecode()
• Mark individual lines in some core/fpdfapi files UNSAFE_TODO().
• Change FlateCompress() to use spans
• Clean up PathPredictor()
• Remove out-parameters from more codec decoding functions
• Remove out-parameters from FlateOrLZWDecode()
• Remove out-parameters from FlateModule::FlateOrLZWDecode()
• Remove out-parameters from FlateUncompress()
• Mass correct bug number in #pragma comment.
• Introduce UNSAFE_TODO() macro.
• Mark UNSAFE_BUFFERS in cpdf_{crypto,security}_handler.cpp
• Fix unsafe buffer in more core/fpdfapi/parser files.
• Roll v8/ 0832ba514..a9dc62b2c (267 commits)
• raw_ptr: USE_ASAN_UNOWNED_PTR -> USE_RAW_PTR_ASAN_UNOWNED_IMPL
• Roll base/allocator/partition_allocator/ 3b0bd80fa..0e650666e (14 commits)
• Remove unsafe_buffer #pragma from fpdftext/ files
• Fix unsafe buffer usage in CPDF_Parser
• Resolve unsafe buffer issues in CFX_CTTGSubTable
• Avoid file-wide unsafe_buffer #pragmas in two jpx/ files
• Resolve unsafe buffer issues in remaining core/ header files
• Avoid unsafe buffers in cfde_texteditengine
• Pass span instead of ptr to vector in GetDisplayPos().
• Avoid unsafe buffer usage in xfa/fxfa.
• Remove unsafe buffer usage in xfa/fwl.
• Avoid unsafe buffer usage in CFGAS_GEShading
• Remove unsafe buffer usage from charposlist.cpp
• Add APIs to fetch struct element attributes of type array
• Resolve unsafe buffer usage in CPDF_IndexedCs
• Resolve unsafe buffer issues in CPDF_TextObject
• Remove #pragma unsafe_buffer_usage from CPDF_DocPageData.
• Checkout Linux sysroots using DEPS entrees instead of hooks
• Checkout clang-format using DEPS entrees instead of hooks
• Move location of clang-format checkout
• Roll build/ 5eb3babb0..01e3c73f5 (24 commits)
• Roll buildtools/ d0f0285d0..4e0e9c73a (3 commits)

PDFium 126.0.6476.0

This version was built with branch chromium/6476 of PDFium

Changes

Commits between chromium/6462 and chromium/6476:

• Resolve unsafe buffer usage in cpdf_aaction.cpp and cpdf_action.cpp
• Fix unsafe buffer usage in xfa_basic_data.cpp
• Rework experimental FPDF_StructElement_Attr_* APIs
• Change FPDF_StructElement_Attr_* APIs to never return a reference
• Remove pragma unsafe_buffer_usage from CPDF_CMapParser.
• Remove #pragma allow_unsafe_buffers from cpdfsdk_appstream.cpp
• Narrow scope of UNSAFE_BUFFERS() in fpdfsdk/fpdf*.cpp
• Resolve unsafe buffer usage in CPDF_PSEngine
• Remove <string.h> inclusion from {Byte,Wide}String headers.
• Remove spurious includes of <string.h>.
• Remove file-wide unsafe_buffers pragmas from fpdfsdk/fpdf*.cpp
• Remove memcpy() from fpdfsdk/fpdf*.cpp (non-test files).
• Move pdfium_test.cc from samples/ to testing/
• Fix return of span_with_terminator() for empty string.
• Explain FPDFPage_RemoveObject() side effect on FPDF_TEXTPAGE handles
• Split off aes/sha headers from fx_crypt.h
• Roll third_party/googletest/src/ eff443c6e..fa6de7f43 (18 commits)
• Mass convert memmove() to FXSYS_memmove().
• Remove code that assumes CPDF_PageObjectHolder contains nullptrs
• Mass convert memset() to FXSYS_memset().
• Add fxcrt::Fill()
• Convert some memset(x, 0, sz) calls to aggregate initializations.
• Mass convert memcpy() to FXSYS_memcpy().
• Convert to std::array<> in CPDF_SimpleFont.
• Use #pragma allow_unsafe_buffers, not pdfium_unsafe_buffers_paths.txt
• Convert to std::array in cmaps/.
• Convert to extern std::array<> in /chromefontdata.
• Roll buildtools/clang_format/script/ e5337933f..3c0acd2d4 (23 commits)
• Roll Zlib from d076d8bd0898 to 7d77fb7fd66d (3 revisions)