PDFium 126.0.6447.0

This version was built with branch chromium/6447 of PDFium

Changes

Commits between chromium/6406 and chromium/6447:

• Gate GDI APIs behind IsUser32AndGdi32Available in cpdf_interactiveform.cpp
• Deduplicate code in CPDF_Parser and rename some methods
• Fix parsing of PDFs with multiple cross reference streams
• Add another pixel test for an edited PDF that regressed
• Spanify CFX_SeekableStreamProxy
• Spanify FPDFText_GetText() and FPDF_GetBoundedText().
• Don't allow two-arg span constructor without UNSAFE_BUFFER() annotation.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in core/
• Put plugin-specific logic in pdfium_common_config.
• Apply UNSAFE_BUFFERS() to two-arg span ctor in xfa/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in testing/
• Apply UNSAFE_BUFFERS() to two-arg span ctor in fpdfsdk/
• Use new instrumented_libs repo
• Roll Zlib from c5bf1b566e5d to d076d8bd0898 (6 revisions)
• Roll build/ e5ff2eff3..e4eef53d5 (27 commits)
• Fix unsafe buffer usage in fxbarcode/datamatrix.
• Avoid some two-arg make_span() calls via extern spans.
• Fix unsafe buffer usage in (non-XFA) JS bindings.
• Fix some unsafe usage in cpdfdsk_{helpers,interactiveform}.cpp
• Roll v8/ f6f7c6822..7f0739496 (162 commits)

PDFium 125.0.6406.0

This version was built with branch chromium/6406 of PDFium

Changes

Commits between chromium/6392 and chromium/6406:

• Use the new v8 interceptor API
• Roll v8/ fe4ad3b98..f6f7c6822 (302 commits)
• Fix unsafe pointer usage in CJX_HostPseudoModel
• Fix typo in {Byte,Wide}StringView.TrimmedRight tests
• Avoid unsafe indexing in EncodeURL()
• Use WriteFloat() inside WriteColorToStream()
• Fix some unsafe buffer usage in CPDF_Dest.
• Mark one remaining unsafe function in core/fpdfapi/edit.
• Do not write out /Page objects that are not in the page tree
• Roll tools/rust/ 1d0018c65..eaff38a21 (6 commits)
• Roll third_party/skia/ 32f1cb507..7338f5521 (263 commits)
• Roll base/allocator/partition_allocator/ c702699cc..8a9c3373f (30 commits)
• Roll third_party/libc++abi/src/ fc6253a64..1317096ef (2 commits)
• Roll third_party/libunwind/src/ fc505746f..419b03c0b (2 commits)
• Update reclient_version to 0.134.1.2c9285b-gomaip
• Roll third_party/googletest/src/ e4fdb87e7..eff443c6e (7 commits)
• Roll third_party/freetype/src/ 2a790a9f4..f42ce2556 (4 commits)
• Change cfx_cmyk_to_srgb code to return struct FX_RGB
• Improve comments and naming in calculate_pitch.h
• Update gn_version to 93ee9b91423c1f1f53fb5f6cba7b8eef6247a564
• Roll Depot Tools from fbb0301f1f70 to 4a9d989f52e9 (81 revisions)
• Roll Code Coverage from 10ce382356ce to f459fdcdfc6c (9 revisions)

PDFium 125.0.6392.0

This version was built with branch chromium/6392 of PDFium

Changes

Commits between chromium/6378 and chromium/6392:

• Switch CPDF_MeshStream to use FX_RGB
• Add struct FX_RGB
• Add fpdfsdk/{pwl,formfiller,fpdfxfa}/ directories to unsafe buffers.
• Make SBThemeData::clrBtnBK a one-dimensional array.
• Remove FXSYS_wcstof in favor of system wcstof().
• Add some FPDFDocEmbedderTests that delete pages and save
• Enforce checking the return value of CFX_DIBitmap::Create()
• Put unsafe buffer configuration into PDFium
• Roll build/ e9a12f276..e5ff2eff3 (85 commits)
• Roll third_party/icu/ 1112fa6b3..d94ab131b (8 commits)
• Flag remaining unsafe buffer usage in fxcrt.
• Change CPDF_MeshStream::ReadColor() to return an array
• Fix undefined behavior in DrawGouraud()
• Fix some nits in DrawGouraud()
• Roll Catapult from 4dc7721a1444 to 949df6114f3f (83 revisions)
• Roll libpng from 3c7486b231c7 to 5140e80f1841 (1 revision)

PDFium 125.0.6378.0

This version was built with branch chromium/6378 of PDFium

Changes

Commits between chromium/6365 and chromium/6378:

• Remove Skia Sfntly dependency
• Remove more wide string literals.
• Remove some FXSYS_ functions in favor of std::char_traits<>.
• Simplify CFXJSE_NodeHelper::CreateNodeForCondition().
• Fix regression in coverage_report.py
• Set a default GN enable_safe_libstdcxx value
• Avoid a compiler compatibility issue with CPDF_DefaultAppearance

PDFium 124.0.6365.0

This version was built with branch chromium/6365 of PDFium

Changes

Commits between chromium/6350 and chromium/6365:

• Convert some WideString::CompareNoCase() to EqualsASCIINoCase().
• Replace ptr/size pair with span in FXJSE_CLASS_DESCRIPTOR.
• Remove in-out parameter from GetFontFamily.
• Enable UNOWNED_PTR_EXCLUSION checks for debug builds only.
• Adjust BUILD.gn files for path-based unsafe buffer warnings.
• Remove another parameter from CPDF_AnnotList methods
• Avoid calls to c_str() in cpdf_filespec.cpp.
• Avoid duplicate checks in StringViewTemplate<>::Substr().
• Remove dead code in RenderPageImpl() callees
• Improve generated content stream data in cpdf_generateap.cpp
• Make FPDFAnnotEmbedderTest.Bug1206 resiliant to changes
• Remove use of string to hold binary data in cgdi_device_driver.cpp.
• Move some fx_system.h replacements into a C++ only section.
• Add script to fetch images from pdfium-skia gold server
• Change scripts to use autoninja
• Roll third_party/skia/ 532505396..32f1cb507 (200 commits)
• Increase internal precision in FXSYS_wcstof().
• Generate more legal content stream data in CPDF_GenerateAP
• Roll build, clang, and rust tools
• Properly account for CTM changes
• Remove unreachable TranslateImageLine() colorspace code
• Roll abseil, buildtools, and libc++
• Rename CPDF_Color::GetRGB() to GetColorRef()
• Rename CPDF_PatternCS::GetPatternRGB() to GetPatternColorRef()
• Roll third_party/googletest/src/ af29db7ec..e4fdb87e7 (411 commits)
• Demonstrate PDF saving bug with a "leaky" CTM
• Roll base/allocator/partition_allocator/ c2bb1848e..c702699cc (26 commits)
• Roll Zlib from 3787595bbbd3 to c5bf1b566e5d (4 revisions)
• Roll Memory Tools from 4753a8cbcd7c to c6d669e13804 (2 revisions)

PDFium 124.0.6350.0

This version was built with branch chromium/6350 of PDFium

Changes

Commits between chromium/6337 and chromium/6350:

• Gate GDI APIs behind IsUser32AndGdi32Available in cfgas_fontmgr.cpp
• Roll abseil, build, buildtools, clang, and partition_allocator
• Roll base/allocator/partition_allocator/ 42bf756b3..dd11a7511 (19 commits)
• Roll gn from a2e2717ea670 to 88e8054aff7b
• Roll buildtools, libc++, and abseil
• Fix cut/paste error in fx_extension_unittest.cpp
• Generate more modern V8 API calls in js_define.h macros
• Remove FXSYS_wcsnicmp() and its unsafe buffer usage.
• Roll build/ 386c65667..3aeefdc1a (30 commits)
• Roll tools/clang/ ff84dc245..44c10e414 (8 commits)
• Roll third_party/libc++abi/src/ 0c4e8fac5..fc6253a64 (6 commits)
• Make core/fxcrt/css compile under nounsafe_buffer_usage.
• Long overdue update of string types in CSS.
• Optimize CFX_FolderFontInfo::FindFont() for an exact match case.
• Roll third_party/freetype/src/ 47574f7ea..2a790a9f4 (2 commits)
• Downgrade raw_span<> to span<> in StringViewTemplate.
• Split implementations of raw_span from span.
• Roll third_party/icu/ a622de35a..1112fa6b3 (5 commits)
• Update span<> to raw_span<> when used as a class member.
• Make pdfium::span<> templated on Extent and InternalPtrType.
• Roll v8/ a86e19715..fe4ad3b98 (253 commits)
• Add CPDF_ColorSpace::GetColorRef()
• Add a pixel test with a sRGB colorspace and a large sc operand value
• Roll Depot Tools from af6eabff5313 to fbb0301f1f70 (66 revisions)
• Roll Code Coverage from 76f45e718405 to 10ce382356ce (4 revisions)

PDFium 124.0.6337.0

This version was built with branch chromium/6337 of PDFium

Changes

Commits between chromium/6322 and chromium/6337:

• Rename string's raw_span() method to unsigned_span().
• Fix wrong matrix outputs in CPDF_PageContentGenerator for path objects
• Fix wrong matrix outputs in CPDF_PageContentGenerator for text objects
• Fix incorrect current transformation matrix when saving PDFs
• Add path objects tests for a PDF saving bug
• Change GetColor() to WriteColorToStream()
• Update UNSAFE_BUFFER macros to match chromium/src/base
• Add text object version of a more complex test for a PDF saving bug
• Remove out-parameters from CPDF_Color::GetRGB()
• Remove out-parameters from CPDF_ColorState::Set{Color,Pattern}()
• Do no write out identity matrices in CPDF_PageContentGenerator
• Fix building with GCC
• Fix nits in CPDF_PageContentGeneratorTest
• Make CFX_RenderDevice::GetDIBits() take RetainPtrs by value
• Rename some colorspace methods
• Rename CPDF_ICCBasedCS member variables
• Roll third_party/zlib/ 646b7f569..3787595bb (4 commits)
• Remove the matrix from CPDF_GeneralState
• Avoid "unsafe" string indexing in PDF_NameEncode().
• Convert EXPECT_STREQ(x, y.c_str()) to EXPECT_EQ(x, y).
• Avoid result string with trailing NUL in XFA Decode().
• Roll third_party/skia/ 9832c7722..49f18efdf (331 commits)
• Roll Catapult from f448d5bf8e57 to 4dc7721a1444 (93 revisions)
• Roll libpng from f11b2ae20fa0 to 3c7486b231c7 (2 revisions)

PDFium 124.0.6322.0

This version was built with branch chromium/6322 of PDFium

Changes

Commits between chromium/6309 and chromium/6322:

• Roll third_party/skia/ 6279c88b9..9832c7722 (80 commits)
• Make core/fxcrt compliant with UNSAFE_BUFFERS() macro.
• Avoid some UNSAFE_BUFFER noise in fpdf_parser_utility.h.
• Fix incorrect matrix outputs in CPDF_PageContentGenerator
• Add a more complex test for a PDF saving bug
• Add a test case for a PDF saving bug
• Simplify PDF_EncodeText() using FX_UTF16Encode()
• Make CPDF_IccProfile's dependency more direct
• Remove CFX_Font::IsEmbedded()
• Stop making CPDF_IccProfile an Observable
• Avoid more future unsafe buffer usage in StringDataTemplate.
• Move remaining code out of third_party/base and into core/fxcrt
• Remove remaining NoDestructor usage
• Convert some C-style arrays to std::array<>.
• Add a way to undo a previous FPDF_SetSystemFontInfo() call
• Re-write some unsafe string code prior to UNSAFE_BUFFERS.
• Roll v8/ b6fd2f17b..a86e19715 (464 commits)
• Make CodePointView::Iterator() demonstrably safe.
• Fix build with chrome plugin enabled but Partition Alloc disabled,
• Roll MarkupSafe from 0bad08bb207b to e582d7f0edb9 (1 revision)
• Roll Instrumented Libraries from 0011c28c8d35 to 0893d760101b (1 revision)
• Roll Jinja2 from e2d024354e11 to c9c77525ea20 (1 revision)
• Copy absl::WrapUnique()'s static_asserts into pdfium::WrapUnique()
• Remove code in the form of "return std::move(local_var);"
• Move third_party/base/ptr_util.h to core/fxcrt
• Merge third_party/base/memory/aligned_memory.h into fx_memory.h
• Move third_party/base/test/scoped_locale.* to testing
• Move third_party/base/{debug,win} to core/fxcrt
• Convert CFX_XMLParser::current_text_ to WideString
• Move third_party/base/numerics to core/fxcrt/numerics
• Rename TrimLeft()/TrimRight() to TrimFront()/TrimBack().
• add file annot api
• Move third_party/base/containers/*.h to core/fxcrt/containers
• Move {Byte,Wide}String::Trim{,Left,Right}() into StringTemplate<>
• Force LF line ending for the AUTHORS file
• Remove Fuchsia support
• Fix typo in public/fpdf_sysfontinfo.h

PDFium 123.0.6309.0

This version was built with branch chromium/6309 of PDFium

Changes

Commits between chromium/6295 and chromium/6309:

• Disallow absl::optional usage via include_rules
• Enforce checkdeps when submitting CLs
• Fix include rules in cfx_glyphcache.cpp
• Move third_party/base/span.h to core/fxcrt
• Move {Byte,Wide}String::Replace() to StringTemplate<>
• Get rid of FX_GET_32WORD macro.
• Use more spans in Revision6_Hash()
• Move {Byte,Wide}String::SetAt() into StringTemplate<>
• Move {Byte,Wide}String::Find() into StringTemplate<>
• Remove fxcrt::ByteSwapTo* functions
• Move {Byte,Wide}String::Insert() to StringTemplate
• Move {Byte,Wide}String::Delete() into StringTemplate.
• Consolidate byteorder code
• Fix use-after-move in CPDF_RenderStatus::CompositeDIBitmap()
• Convert fx_random.cpp to use safe types
• Use std::array<> in fx_coordinates.cpp.
• Add missing includes uncovered by libc++ change
• Roll third_party/skia/ a9db1213b..6279c88b9 (349 commits)
• Roll build/ 9ca0d2ce9..386c65667 (118 commits)
• Add UNSAFE_BUFFER annotations to fx_dib.h
• Move even more code still into StringTemplate.
• Get rid of pointer arithmetic in *MSBFIRST() and *LSBFIRST() macros.
• Give better error diagnostic in cpdf_dictionary.h
• Put GetBuffer() and ReleaseBuffer() in StringBaseTemplate
• Avoid adding stream objects directly to arrays in CPDF_SyntaxParser
• Roll tools/clang/ 2b9d966ec..ff84dc245 (41 commits)
• Place common code for byte/wide strings in StringTemplate.
• Combine FX_wcspos() and FX_strpos() into fxcrt::spanpos().
• Encapsulate FT_Set_Pixel_Sizes()
• Roll Zlib from 956936c53cb6 to 646b7f569718 (3 revisions)

PDFium 123.0.6295.0

This version was built with branch chromium/6295 of PDFium

Changes

Commits between chromium/6281 and chromium/6295:

• Move WideString::WStringLength() to cpdfsdk_helpers.cpp
• Add runtime check for streams in CPDF_Array::SetAtInternal() and friends
• Do not let CPDF_Array::SetNewAt() and friends take a CPDF_Stream
• Make RenderDeviceDriverIface::SetDIBits() take RetainPtrs by value
• Return RetainPtr<> from StringData::Create()
• Avoid UNSAFE_BUFFER operations in core/fxcrt/{byte,wide}string.h
• Remove ByteString::AllocCopy() and WideString::AllocCopy().
• Ensure CPDF_Stream's dictionary is always a direct object
• Give "V4" and "V5" parser code better names
• Mark CVE-2023-52355 as mitigated in third_party/libtiff/METADATA
• Fix PDF loading when an initial xref stream references a xref table
• Switch from absl::optional to std::optional
• Add another pixel test for incorrect cross reference stream handling
• Sync Chromium's include_rules for Abseil
• Spanify FX_strstr() and FX_wcsstr()
• Avoid potential msan warnings in test SpanEquals.Empty
• Add new base::span<> functions to pdfium::span<>.
• Roll buildtools/, third_party/libc++/src/, third_party/libc++abi/src/
• Add improvements to core/fxcrt/span_util.h
• Tidy some code in fx_crypt_aes.cpp
• Introduce UNSAFE_BUFFERS() macro to PDFium.
• Roll Depot Tools from 35a530663508 to af6eabff5313 (49 revisions)
• Roll Code Coverage from 2bd00824f032 to 76f45e718405 (1 revision)
• Roll tools/rust/ e721a72ad..bcaf16e55 (9 commits)
• Remove limit on number of form XObjects within a form XObject
• Update reclient_version to 0.130.0.546556b-gomaip
• Roll third_party/libunwind/src/ 2602aecdf..fc505746f (7 commits)
• Roll gn from 85944ebc24a9 to a2e2717ea670
• Roll third_party/abseil-cpp/ b7ad4e9ef..d391aa34a (8 commits)
• Roll third_party/freetype/src/ ca76683b7..47574f7ea (10 commits)
• Ignore /Prev for hybrid-reference files
• Revert ProcessCrossRefV5Entry() overwrite change
• Add pixel test for an edited PDF that regressed