)]}' { "log": [ { "commit": "e021eaa19cf7583e0e86e2acc56a91e5bb415aee", "tree": "5d084ed12e17fb9ee5c6bc92a16159ea078cac4b", "parents": [ "4ecbbae704b07ae87ee623b9c4b55a723d854b1a" ], "author": { "name": "Etienne Pierre-doray", "email": "etiennep@chromium.org", "time": "Fri Aug 28 21:51:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 21:56:09 2026" }, "message": "[profiler] Add browser tests for ThreadPool profiler\n\nThis adds CreatePeriodicSamplingScheduler interface to\noverwrite tests params.\nThis also changes the cutoff for ignoring new workers close\nto the end of a collection from 1s (10 samples) to 300ms (3 samples)\nboth in test and production.\n\nBug: 40179300\nChange-Id: I45801382ecd169df122f74098f089c0bc1205a07\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8293882\nReviewed-by: Sean Maher \u003cspvm@chromium.org\u003e\nCommit-Queue: Etienne Pierre-Doray \u003cetiennep@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1688359}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7c6fcb9c348f8130f682e1350c6e969b4128f2bf\n" }, { "commit": "4ecbbae704b07ae87ee623b9c4b55a723d854b1a", "tree": "2aa0ba2a25917020faaf84d25e0803990277d037", "parents": [ "d2c5acab984f3030f459da79a3ceca4d7d54ba7a" ], "author": { "name": "Gabriel Charette", "email": "gab@chromium.org", "time": "Fri Aug 28 19:45:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 19:50:37 2026" }, "message": "ReducePPMs: Clean up DelayedTaskHandleDelegate to always doom weak ptrs\n\nReducePPMs is now always enabled and being cleaned up.\nIn DelayedTaskHandleDelegate::CancelTask(), unconditionally call\nInvalidateWeakPtrsAndDoom() instead of branching on kReducePPMs.\n\nFixed: 424432184\nb: 483482004\nChange-Id: I3d4e0e7a4b1efd81ea4666b2a4b6b2d96692ffe6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8315568\nAuto-Submit: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nReviewed-by: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1688254}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0ef4c30cb5691b9131ffce147fda82c8b1d6619d\n" }, { "commit": "d2c5acab984f3030f459da79a3ceca4d7d54ba7a", "tree": "46caa976685120a9add3bfb2f3142d7bfb8bef92", "parents": [ "166c8baf132dba41111670a2f17f588245ed978f" ], "author": { "name": "Patrick Monette", "email": "pmonette@chromium.org", "time": "Fri Aug 28 14:19:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 14:24:32 2026" }, "message": "[Android] Remove redundant Java memory pressure IPC for child processes\n\nMemory pressure notifications to child processes were unified to go\nthrough mojom::ChildProcess::OnMemoryPressure over Mojo via\nRenderProcessHostImpl and BrowserChildProcessHostImpl\n(crrev.com/c/7396377).\n\nThe legacy Java AIDL IPC (IChildProcessService.onMemoryPressure) was\nkept concurrently, causing child processes on Android to receive memory\npressure notifications twice (once via Mojo and once via AIDL).\n\nThis CL removes the obsolete Java AIDL path:\n- Removes onMemoryPressure from IChildProcessService.aidl,\n ChildProcessService.java, and ChildProcessConnection.java.\n- Removes the now-unused MemoryPressureMonitor.getLastReportedPressure().\n- Updates documentation in MemoryPressureMonitor.java.\n\nBug: 441951621\nChange-Id: Ia2cbeb6ac6e259851856af59712398c1c804d70d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8306732\nReviewed-by: Yaron Friedman \u003cyfriedman@chromium.org\u003e\nCommit-Queue: Patrick Monette \u003cpmonette@chromium.org\u003e\nReviewed-by: Dominic Farolino \u003cdom@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687980}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 313cbcef2ba3c0b8728772d9ced4639103a838f3\n" }, { "commit": "166c8baf132dba41111670a2f17f588245ed978f", "tree": "8033de3a27ee6261a8b7ab59bc49b9f1e23d8f65", "parents": [ "361febcb4df162045d40912559e875028f8d67de" ], "author": { "name": "Sky Malice", "email": "skym@chromium.org", "time": "Fri Aug 28 13:45:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 13:50:29 2026" }, "message": "[Clean] Remove unused variables in base and content tests\n\nRemove unused line limits, toast durations, web contents pointers, debug\nflags, and byte count constants in base, UI, content, and services.\n\nTAG\u003dagy\nCONV\u003d888b72a5-2f6b-42c1-8d5b-36beaf8b039d\n\nBug: 546549170\nChange-Id: I187cca9449acc25b0db229b44221e43f0bd59b4e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8289051\nReviewed-by: Matt Reynolds \u003cmattreynolds@chromium.org\u003e\nReviewed-by: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nReviewed-by: Bo Liu \u003cboliu@chromium.org\u003e\nCommit-Queue: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687959}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ff6cb0032d9885a695659cf01a5a807ec20ffbd2\n" }, { "commit": "361febcb4df162045d40912559e875028f8d67de", "tree": "f8e9afba7d58814530590f00d396b863ad6e5822", "parents": [ "4ecdbd99e377b5f1383cfd2cce88cec764943554" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 28 08:54:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 09:00:01 2026" }, "message": "[PA] Support maximum AllocToken IDs\n\nCurrently, the maximum number of AllocToken IDs is set to 2.\nThis CL increases it to the maximum supported value (SIZE_MAX).\n\nBug: 549500187, 549496291, 477186304\nChange-Id: I98426ac4141793ccc25f3c32e8e5b3a91b3640af\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8284578\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687857}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 825e8de34d6b24acde630f14f7b99c3d72d9ad21\n" }, { "commit": "4ecdbd99e377b5f1383cfd2cce88cec764943554", "tree": "6c327a331a1bfa37bae99b44f8108d219871c02d", "parents": [ "2f57bc3f684a067253859e8db19662a7c0239002" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 28 08:18:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 08:23:36 2026" }, "message": "[PA] Decouple AllocToken from partition index\n\nCurrently, the AllocToken is used directly as the partition index.\nHowever, as upcoming work, we plan to increase the maximum number of\nAllocTokens from 2 to 2^32-1.\n\nTo prepare for this change, this CL decouples them in both directions:\n(1) AllocToken -\u003e partition index mapping: Introduces a mapping function (`PartitionIndexFromAllocToken`) to resolve the partition index from an AllocToken.\n(2) Partition index -\u003e AllocToken mapping: Defines a dedicated default value `kDefaultAllocTokenValue` instead of using `kDefaultPartitionIndex` for default AllocToken value.\n\nBug: 549500187\nChange-Id: Ib2201c6202c6a0211253dbe8fd948c133dcb2ecf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8264052\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687842}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2cbf35b67a1f0dafa4ff675ed404af0d5b2791ff\n" }, { "commit": "2f57bc3f684a067253859e8db19662a7c0239002", "tree": "db039dc70b27f1067de1b5bf1d62ff45dde7b029", "parents": [ "5737c71e19d10adaecc38d9ec3b99ada77b75e3b" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Fri Aug 28 07:05:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 07:11:49 2026" }, "message": "[PA/MO] Add an option to apply quarantine only to IPC-triggered tasks\n\nGiven that IPC-triggered tasks may contain web-controlled behavior,\nwe would like to have a configuration to perform quarantine only in such\ncondition.\n\nTAG\u003dagy\nCONV\u003d958945a5-4b47-4611-afe0-c9f4fbee0c41\n\nBug: 329027914\nChange-Id: Ib31921cc233f1cbbc7e9b1c200dcf8a5239da9bf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7863493\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687816}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 47e308465ac27fd17708b23ce753bb3fd75a20f3\n" }, { "commit": "5737c71e19d10adaecc38d9ec3b99ada77b75e3b", "tree": "6372ad3a7551090f08a08ac0b59e78a18f29885e", "parents": [ "d33f20144cd10ddfafa9afaf9099130c269302de" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Aug 28 06:38:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 06:44:11 2026" }, "message": "PA: Remove `base/augmentations/`\n\nThis isn\u0027t really necessary. Remove the directory, the reference in the\n`README.md`, and merge the non-null attribute into the main body of\n`compiler_specific.h`.\n\nWhile we\u0027re at it, update `compiler_specific.h` with the canonical\n`//base` copy. Note that a few entries are exclusive to ours:\n\n* `PA_EXCLUDE_FROM_EXPLICIT_INSTANTIATION` and\n* `PA_NOPROFILE`\n\nReviewing notes:\n* patchset 1: informational dump of `base/compiler_specific` into\n `partition_alloc_base/`.\n* patchset 2: first draft, copying everything and prefixing `PA_`\n everywhere.\n* patchset 3: remove unused things to almost satisfy the compile size\n checker.\n\nThis CL was generated with Jetski.\n\nCompile-Size: We prefer not to strip all comments from this header.\nChange-Id: If9fa1076df7ef429562eaf1cffd4da881c8584f9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8302474\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687809}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7f2ec1d6e864cdcc5a2818726656b28e322ec140\n" }, { "commit": "d33f20144cd10ddfafa9afaf9099130c269302de", "tree": "8bb7a89faaec17ca0bd2c6afa55b2f3d26124d0d", "parents": [ "4ed4c3d9e0fc8b93f9897facbc7c3f6c2e9e5469" ], "author": { "name": "Ke Yu", "email": "kyu@microsoft.com", "time": "Fri Aug 28 05:18:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 05:22:44 2026" }, "message": "[Android] Reuse system feature list in DeviceInfo\n\nOn Android T and later, collect form-factor features and the Vulkan DEQP level from one getSystemAvailableFeatures() result. Fall back to the existing directed queries when the feature list is unavailable.\n\nBug: 546283186\nChange-Id: I04e335b56f235bcb329e7758aaa49251a886fe8e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8251731\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nReviewed-by: Yaron Friedman \u003cyfriedman@chromium.org\u003e\nCommit-Queue: KE YU \u003ckyu@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687777}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 757367112855aca7913df751416cda3b2066c494\n" }, { "commit": "4ed4c3d9e0fc8b93f9897facbc7c3f6c2e9e5469", "tree": "1e16ca8585d7424c27585ed055bd18b765f1653f", "parents": [ "7eaa136509c77c4c16f1a6beb23cc32c6529b5c1" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Fri Aug 28 04:42:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 04:46:59 2026" }, "message": "Prevent a realloc slot reuse with live raw_ptr refs\n\nPreviously for allocations that requested a new smaller size, we\nwouldn\u0027t look at the value of the ref count of BRP. This means that if\nwe decided to reuse the slot all the raw_ptrs remain valid and pointing\ninto the slot.\n\nHowever this could mean for slots both slots that can_store_raw_size or\neven regular slots that get realloc\u0027d for a new purpose, that the old\nraw_ptrs could still be accessed essentially allowing a UaF because they\ndidn\u0027t properly quarantine.\n\nWe fix this by checking the ref count and rejecting in place realloc if\na raw_ptr is alive and pointing to this slot (we can continue to realloc\nif there are no raw_ptr referencing this slot).\n\nTwo regression tests are added one for direct map and one for thread\ncache level allocations.\n\nBug: 549709219\nChange-Id: I031eebc435f452626a285ca14d9ff361aebd530e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8294158\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687767}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e5b9eae52a251d6c1b499b7e33f99ab15484f48d\n" }, { "commit": "7eaa136509c77c4c16f1a6beb23cc32c6529b5c1", "tree": "36888189296034e37b0935c78e9ada8237e5efe8", "parents": [ "2fce7380e65066e00367009b14b59ac6f35a24ba" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Thu Aug 27 23:53:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 00:00:54 2026" }, "message": "Add a WithExtensionRemoved(char key) to LanguageTag\n\nThe method creates a new LanguageTag object without the extension whose\nsingleton is identified by `key`.\n\nChange-Id: Ia92ebb7e74285e7a22d3befeee7e6a391056d746\nBug: 517510055\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8302734\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nReviewed-by: Paula Gómez \u003cpaugomez@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687668}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 29f3435c8b78022ba5e238a7c7061468498f124c\n" }, { "commit": "2fce7380e65066e00367009b14b59ac6f35a24ba", "tree": "81360e56334ee2b2eb91151ae16b9cb38e870158", "parents": [ "8d7ceb81c0f849b3face530a68217f7922d99a9a" ], "author": { "name": "Patrick Monette", "email": "pmonette@chromium.org", "time": "Thu Aug 27 22:33:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 22:38:12 2026" }, "message": "memory_coordinator: Adopt base::MemoryLimit across consumers and Mojo\n\nMigrates memory limit tracking and consumer notification APIs from raw\nints to base::MemoryLimit. Introduces mojo_base.mojom.MemoryLimit\ntypemapping and converts all consumers to use the new type and its\nscaling/threshold helpers.\n\nBug: 441951621\nChange-Id: Ic263a55652d67e53b327310b8abeb8b0ad1aa361\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256572\nOwners-Override: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Patrick Monette \u003cpmonette@chromium.org\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nReviewed-by: Dominic Farolino \u003cdom@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687611}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b58ddb0dc736d925f8c6f7b9846c0e9f2ca592f7\n" }, { "commit": "8d7ceb81c0f849b3face530a68217f7922d99a9a", "tree": "21ebca3c68302e8cbd0903eb3a405dd12972713d", "parents": [ "e0198c13001d42c5fec00a18311ab9f7c598754c" ], "author": { "name": "Phil Yan", "email": "philyan@chromium.org", "time": "Thu Aug 27 21:53:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 21:58:29 2026" }, "message": "[BlockModel] Require Android 17 26Q4+ for MediaCodec Block Model\n\nThe MediaCodec Block Model suffers from video decoder hangs and crashes\non empty End-Of-Stream (EOS) LinearBlock flushes on earlier Android\nversions due to an OS framework bug in Codec2Buffer.\n\nThe framework fix landed in 26Q4 with CTS coverage in Android 17.\nThis change updates MediaCodecVideoDecoder to require Android 17 26Q4+\n(SDK_VERSION_FULL_CINNAMON_BUN_2) before enabling the Block Model.\n\nTAG\u003dagy\nCONV\u003db38d1de4-321a-4f5f-8b33-a133a25a30c2\n\nBug: 406334648\nChange-Id: Ie94453b461586d87bdb389d93d22e752351df7fd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8296904\nReviewed-by: Eugene Zemtsov \u003ceugene@chromium.org\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Phil Yan \u003cphilyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687573}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 468728d3d1862a5f1bc14e264ea2a1269140ffe2\n" }, { "commit": "e0198c13001d42c5fec00a18311ab9f7c598754c", "tree": "6781d51f0e17c2b4702c5e26858c14c16584599b", "parents": [ "ce73182af68827e5711710ec7a0fe4251695db52" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Thu Aug 27 19:57:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 20:04:34 2026" }, "message": "Add script_subtag() and variant_subtags() to LanguageTag\n\nI\u0027m also changing the return of extensions to base::flat_map to reduce\nthe code size in language_tag.cc\n\nChange-Id: I8408569d1a7fb75c6576d6219f69e360622217de\nBug: 517510055\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8303213\nReviewed-by: Paula Gómez \u003cpaugomez@google.com\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687494}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 83316919e50b5b508f0b8323de7f768e725a3d72\n" }, { "commit": "ce73182af68827e5711710ec7a0fe4251695db52", "tree": "ff70911e9895c19936959ee2245708d8a365f4e7", "parents": [ "9eaef2abad348435e54db81297b0ee637fbe907b" ], "author": { "name": "fayev-g", "email": "fayev@google.com", "time": "Thu Aug 27 18:51:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 18:57:18 2026" }, "message": "base: Do not remove sampling_heap_profiler on iOS when use_allocator_shim is false\n\nsampling_heap_profiler sources were historically removed on iOS when\nuse_allocator_shim \u003d false to work around compiler TLS issues in legacy\nCronet iOS builds (crbug.com/1075702). Since\nbase/allocator/dispatcher/tls.h now uses POSIX pthread emulation, these\nfiles compile cleanly on iOS.\n\nFurthermore, with use_blink \u003d true on iOS / tvOS,\nblink::InspectorMemoryAgent and content::protocol::MemoryHandler\nunconditionally depend on base::SamplingHeapProfiler. Removing this\nexclusion allows builds with use_allocator_shim \u003d false to link cleanly\nand aligns iOS with macOS, Linux, Android, and Windows.\n\nBug: 553058307\nChange-Id: I3c1f5ae55018fe47ba2730e3eb4d45ec284c7448\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8298793\nReviewed-by: Mark Mentovai \u003cmark@chromium.org\u003e\nReviewed-by: Rohit Rao \u003crohitrao@chromium.org\u003e\nCommit-Queue: Rohit Rao \u003crohitrao@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687445}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2b31588033344ef4c83df17f4e052334bf030b59\n" }, { "commit": "9eaef2abad348435e54db81297b0ee637fbe907b", "tree": "862589156170b748a625592a0dd13d468d4c5f47", "parents": [ "673a23f4864199939ee958bea9e20ea41fbc8e82" ], "author": { "name": "Rob Pitkin", "email": "robpitkin@google.com", "time": "Thu Aug 27 18:37:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 18:42:32 2026" }, "message": "hid: Support Input reports on Android\n\nImplements WebHID Input Report event streaming on Android. Previously,\nWebHID on Android supported device enumeration, feature reports, and\noutput reports, but could not receive asynchronous input reports from\nconnected HID devices.\n\nThis CL introduces input report streaming support:\n- Adds HidEventListener registration APIs to\n org.chromium.base.hid.HidDevice.\n- Manages the HID event listener lifecycle in ChromeHidConnection,\n registering on the UI task runner (TaskTraits.UI_DEFAULT) and\n forwarding received reports across JNI to native C++.\n- Hardens event listener registration and deregistration against runtime\n SecurityException and IllegalStateException (e.g. if Special App\n Access is revoked in Android Settings during an active connection).\n- Properly tears down and unregisters the event listener when the native\n connection pointer is detached or closed.\n- Implements HidConnectionAndroid::OnInputReport on the UI sequence,\n framing input packets into RefCountedBytes buffers with prepended\n report IDs and passing them to HidConnection::ProcessInputReport.\n\nTAG\u003dagy\nCONV\u003d6aafd58f-c804-4f2f-96a3-34ad883a0249\n\nBug: 514443367\nChange-Id: I2bec0454f588f60c03167648e878f550ea5d1f87\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8274873\nCommit-Queue: Rob Pitkin \u003crobpitkin@chromium.org\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nReviewed-by: Matt Reynolds \u003cmattreynolds@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687432}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 66f7dc88713fb923cf93dabbecb05f5afa5f4845\n" }, { "commit": "673a23f4864199939ee958bea9e20ea41fbc8e82", "tree": "5b01c201680246bb49f4cdd75f9cb18e5c90e373", "parents": [ "14a13c126f7778d1ea95b1eeb0349484bde6064e" ], "author": { "name": "David Bienvenu", "email": "davidbienvenu@chromium.org", "time": "Thu Aug 27 16:53:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 17:03:40 2026" }, "message": "Always allow writing to special dirs if under temp dir\n\nBlockTestsWritingToSpecialDirs is used to block tests from writing\nfiles to special directories and changing the local machine state.\nBut, it inadvertently blocked writing to temp dirs. E.g., writes\nto C:\\src are blocked, but DIR_TEMP might be C:\\src\\temp. This CL\nmakes it so writing to temp dir and its descendents is always allowed\nbecause by definition, that won\u0027t change the local machine state.\n\nBug: 40066315\nChange-Id: If98ab9a02bbd4cae60f2dde7a6b2a0718129d607\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8299932\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCommit-Queue: David Bienvenu \u003cdavidbienvenu@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687335}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d2ac3bc805ac0a79857f0266c8566eed0ade300d\n" }, { "commit": "14a13c126f7778d1ea95b1eeb0349484bde6064e", "tree": "e1b3b659121e4cdaefafc5364ee9cda44cf3becb", "parents": [ "a3040364569ef147664876551783e69c50ceab2c" ], "author": { "name": "Andrew Grieve", "email": "agrieve@chromium.org", "time": "Thu Aug 27 15:58:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 16:03:34 2026" }, "message": "Android: Make use of @JniType in //chrome/browser (part 1/N)\n\nMigration done using jni-type-conversion skill \u0026 manual touch ups.\n\nBug: 491444984\nChange-Id: I8e5c56ce27188859c88d2f299c36ced092ed94f0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279316\nReviewed-by: Wenyu Fu \u003cwenyufu@chromium.org\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687279}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3729a43e628aef723acc3513e6c2c5aeecee65cf\n" }, { "commit": "a3040364569ef147664876551783e69c50ceab2c", "tree": "1018bed8e6d54c1ed4addb8cff36bac1528674d9", "parents": [ "74bcd59f2899d204ecd3394a76edbed5e74f096f" ], "author": { "name": "Etienne Pierre-doray", "email": "etiennep@chromium.org", "time": "Thu Aug 27 13:50:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 13:59:46 2026" }, "message": "[ThreadPool] Synchronize ThreadGroupProfiler using ThreadGroupImpl lock\n\nPreviously, ThreadGroupProfiler used a sequence-bound pattern where\nworker thread lifecycle events (started, active, idle, exiting) were\nposted to a dedicated task runner to synchronize profiler state. This\nintroduced asynchronous thread hops, complex shutdown sequencing, and\npotential races with thread exits\n(549390601,549465784,549311554,549363784,\n549630717,549372357,549586806,549636742).\n\nThis CL refactors ThreadGroupProfiler to leverage ThreadGroupImpl\u0027s\nexisting lock:\n- Replaces the dedicated sequence and thread hopping with synchronous\n state updates under ThreadGroupImpl\u0027s lock_.\n- Eliminates duplicate/shadowed worker tracking in ThreadGroupProfiler:\n ThreadGroupImpl now directly inspects its own `workers_` and\n `idle_workers_set_` when initiating or managing profiling.\n- Removes ThreadGroupProfiler::Shutdown() and associated teardown\n complexity.\n\nBug: 549390601\nChange-Id: Ieb282bd73c3bdbdbb571a50d8bb07d5727ed3ade\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8271150\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Etienne Pierre-Doray \u003cetiennep@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687168}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 81daf8f77aae8dd0173856f8449c0dc4e9ee82b9\n" }, { "commit": "74bcd59f2899d204ecd3394a76edbed5e74f096f", "tree": "88eedb99eb2ab465ad8b0577878902fb7aa31d56", "parents": [ "06e03344b4d860a7f50a564b3a6323ba700194b1" ], "author": { "name": "Jose Dapena Paz", "email": "jdapena@igalia.com", "time": "Thu Aug 27 11:51:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 11:57:03 2026" }, "message": "Report the WinHeap footprint, allocated objects and waste separately\n\nmalloc/win_heap reported only the bytes the CRT heap has handed out.\nThose bytes are already counted in malloc/allocated_objects, so they\nwere counted twice, and the rest of the heap -- the bytes it holds\ncommitted but has not handed out -- was only visible malloc-wide in\nmalloc/metadata_fragmentation_caches, where it cannot be attributed to\na backend.\n\nReport each part of the heap once instead: malloc/win_heap is the\nresident footprint, its live objects are suballocated from it under\nmalloc/allocated_objects/win_heap, and its waste sits in\nmalloc/win_heap/metadata_fragmentation_caches, excluded from the\nmalloc-wide waste. This also brings virtual_size, wasted and\nfragmentation to parity with what PartitionAlloc reports per partition.\n\nAn ownership edge out of malloc/allocated_objects could not be used for\nthe attribution: an allocator dump can only own a single target, and it\nalready owns malloc/partitions.\n\nBug: 483623915\nChange-Id: I6eeb82c2f1c32e445e32e070025efe1ca182a1b7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256398\nReviewed-by: Siddhartha S \u003cssid@chromium.org\u003e\nCommit-Queue: José Dapena Paz \u003cjdapena@igalia.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687106}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5faa4195d9bd1c94134255562d89b4f17310aa0b\n" }, { "commit": "06e03344b4d860a7f50a564b3a6323ba700194b1", "tree": "2b97c05edfbb9b80bd83366bf7347c5f3867315c", "parents": [ "392ecc92b7736fad6e3daaf70792794f5f1c0319" ], "author": { "name": "Greg Thompson", "email": "grt@chromium.org", "time": "Thu Aug 27 10:36:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 10:40:57 2026" }, "message": "[base] Map EAGAIN to FILE_ERROR_ACCESS_DENIED in base::File\n\nPOSIX specifies that fcntl(F_SETLK) may set errno to either EACCES or\nEAGAIN. Previously, EAGAIN was not mapped in OSErrorToFileError, causing\nbase::File::Lock to return FILE_ERROR_FAILED instead of\nFILE_ERROR_ACCESS_DENIED, and triggering a DCHECK in debug builds.\n\nThis CL maps EAGAIN to FILE_ERROR_ACCESS_DENIED, aligning POSIX behavior\nwith Windows (where ERROR_LOCK_VIOLATION maps to\nFILE_ERROR_ACCESS_DENIED).\n\nTAG\u003dagy\nCONV\u003db81441ef-f611-4eef-9b95-00f8dfa13f69\n\nFixed: 549870894\nChange-Id: I5305a719cfc124e841eaad0fe0567776f747ef26\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8297478\nAuto-Submit: Greg Thompson \u003cgrt@chromium.org\u003e\nReviewed-by: Wez \u003cwez@chromium.org\u003e\nCommit-Queue: Greg Thompson \u003cgrt@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687086}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ace1b15f90de7dc8dcd6f5ff365e5b8614e32024\n" }, { "commit": "392ecc92b7736fad6e3daaf70792794f5f1c0319", "tree": "67c8dc0577e675d49e9869fe274909300fbfca11", "parents": [ "9ec2d4823d22ca3061cc9a206137bddb0e52ccac" ], "author": { "name": "Trung Nguyen", "email": "tne@google.com", "time": "Thu Aug 27 08:59:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 09:04:17 2026" }, "message": "Include Build ID in Android native stack traces\n\nWhen generating native stack traces on Android, the Build ID was\npreviously omitted. This prevented deobfuscate_official.py from\nsymbolizing native stack traces when the Version Code is absent from the\nAPK path.\n\nThis change appends `(BuildId: \u003cbuild_id\u003e)` for each frame when\navailable.\n\nBug: 535927737\nChange-Id: Ib5695abb6abbd70f5fbb47a5319cf9a278c34950\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8251286\nReviewed-by: Richard Coles \u003ctorne@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Trung Nguyen \u003ctne@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687054}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: de0eb22ed4778e70e4d7aa6ec79039c47259228a\n" }, { "commit": "9ec2d4823d22ca3061cc9a206137bddb0e52ccac", "tree": "3685053e695ab6fc68b3cd5a525582c3968ea79a", "parents": [ "a8420e515d634d9340cec6c9a65f329d16ebbf47" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:22:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:30:38 2026" }, "message": "ReallocProtectedIterator: Use `std::optional`\n\nAs a follow-up to https://crrev.com/c/8276244,\navoid using the default-constructed\n`partition_alloc::SlotAddressAndSize` (all zeros) as a sentinel value;\nexplicitly use `std::nullopt` to cover these cases.\n\nNote that `SlotAddressAndSize::From()` is never expected to return 0\u0027s;\nthis CL simply covers the case where we would deliberately want to\ndenote \"no value stored in `slot_`\".\n\nChange-Id: I61528313eb30159959acdb3db876751f68c64f43\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8295498\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687034}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dc71c83a5fb4ae67622617142765e3356a8c7e69\n" }, { "commit": "a8420e515d634d9340cec6c9a65f329d16ebbf47", "tree": "fd302df82368b241c98a263a150d61345c8c428c", "parents": [ "90a25c8873d3bf66416ee6364ddaa08eb560b802" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:22:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:29:34 2026" }, "message": "PA: Adjust args to `FreeAfterBRPQuarantine()`\n\nFurther propagate `SlotAddressAndSize` for improved ergonomics.\n\nChange-Id: I554ab45de97c0662362b3d63ed147e6c68400324\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8282223\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687033}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c52f709dfb70db4cadc92379b17294b3056a142e\n" }, { "commit": "90a25c8873d3bf66416ee6364ddaa08eb560b802", "tree": "4351e33e1366967f178478139d295e6e73748b47", "parents": [ "482476640ef864762de6f1b71fe56a568f57fc4b" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:15:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:23:02 2026" }, "message": "PA: Introduce `InSlotMetadata::From()`\n\nto replace `PartitionRoot::InSlotMetadataPointerFromSlotStartAndSize()`,\nwe introduce a static getter that directly accepts a\n`SlotAddressAndSize`.\n\nThis CL was generated with Jetski.\n\nChange-Id: I2ae4fbaf1e204d5b2d74a3b123308505e77b169a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279193\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687027}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e1ada26e7dbef7721504912c22cdb4872c2bfbd6\n" }, { "commit": "482476640ef864762de6f1b71fe56a568f57fc4b", "tree": "a71dcc3b821d0f750b1c487f11aa938514924059", "parents": [ "85e3397ef0d0d192291719ca2d1caf8b62153603" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:13:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:18:35 2026" }, "message": "ReallocProtectedIterator: Use PA struct\n\n`internal::WrappedBackingSlot` has (semantically) the same members as\n`partition_alloc::SlotAddressAndSize`, plus an extra `explicit operator\nbool()` used just once in the implementation.\n\nThis CL removes the indirection by just using `SlotAddressAndSize`\ndirectly, preventing the shucking/repacking cycles.\n\nThis CL was generated with Jetski.\n\nChange-Id: Iff3cee6afeeab897b80a5913150898e7d7416ebe\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276244\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687026}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e7a328068e889f855ecf1d0e2e89c23e8e098bd3\n" }, { "commit": "85e3397ef0d0d192291719ca2d1caf8b62153603", "tree": "3fbec2389a85333a7d52f9370c2e534413cc31de", "parents": [ "9ffaacc5e768ee60ccb79596a16f6b4d8c0c1941" ], "author": { "name": "Joe Mason", "email": "joenotcharles@google.com", "time": "Thu Aug 27 07:45:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 07:49:35 2026" }, "message": "Remove base::KiBU, MiBU, etc.\n\nAlso converts the last remaining use of KiBU to KiB.\n\nFixed: 448661443\nChange-Id: I0a94a24ae104739c7acec24eaa981993bed57923\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8302854\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nAuto-Submit: Joe Mason \u003cjoenotcharles@google.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687013}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 38e3e411b2ddd65752354959a9d1b4231eb9ebcb\n" }, { "commit": "9ffaacc5e768ee60ccb79596a16f6b4d8c0c1941", "tree": "c41548dd9de6c189cf2345af740780b21188cdde", "parents": [ "8b6918958e825dd51f9ba8ea82555184ccd86955" ], "author": { "name": "luci-bisection@appspot.gserviceaccount.com", "email": "luci-bisection@appspot.gserviceaccount.com", "time": "Thu Aug 27 01:04:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 01:09:57 2026" }, "message": "Revert \"[mojo] Allocate unsafe shared memory regions in-process on Linux\"\n\nThis reverts commit 33864563d0fa4f0195649c916f8997a743d5ad22.\n\nReason for revert:\nLUCI Bisection has identified this change as the cause of a test failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/test-analysis/b/4804578013872128\n\nSample build with failed test: https://ci.chromium.org/b/8672388300894550833\nAffected test(s):\n[://chrome/test\\:telemetry_gpu_integration_test!flat::#gpu_tests.trace_integration_test.TraceIntegrationTest.TraceTest_CSS3DBlueBox_TreesInViz](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:telemetry_gpu_integration_test%21flat::%23gpu_tests.trace_integration_test.TraceIntegrationTest.TraceTest_CSS3DBlueBox_TreesInViz?q\u003dVHash%3Afa3bb27e143137d8)\n[://chrome/test\\:telemetry_gpu_integration_test!flat::#gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFrom2DAlphaCanvas_DisableReadbackFromTexture](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:telemetry_gpu_integration_test%21flat::%23gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFrom2DAlphaCanvas_DisableReadbackFromTexture?q\u003dVHash%3Afa3bb27e143137d8)\n[://chrome/test\\:telemetry_gpu_integration_test!flat::#gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFromWebGLCanvas_OneCopy](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:telemetry_gpu_integration_test%21flat::%23gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFromWebGLCanvas_OneCopy?q\u003dVHash%3Afa3bb27e143137d8)\n[://chrome/test\\:telemetry_gpu_integration_test!flat::#gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFromWebGLCanvas_TwoCopy_Accelerated](https://ci.chromium.org/ui/test/chromium/:%2F%2Fchrome%2Ftest%5C:telemetry_gpu_integration_test%21flat::%23gpu_tests.trace_integration_test.TraceIntegrationTest.WebGLCanvasCaptureTraceTest_VideoStreamFromWebGLCanvas_TwoCopy_Accelerated?q\u003dVHash%3Afa3bb27e143137d8)\n\nIf this is a false positive, please report it at http://b.corp.google.com/createIssue?component\u003d1199205\u0026description\u003dAnalysis%3A+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Ftest-analysis%2Fb%2F4804578013872128\u0026format\u003dPLAIN\u0026priority\u003dP3\u0026title\u003dWrongly+blamed+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F8262480\u0026type\u003dBUG\n\nOriginal change\u0027s description:\n\u003e [mojo] Allocate unsafe shared memory regions in-process on Linux\n\u003e\n\u003e On Linux and ChromeOS every sandboxed process installs base\u0027s shared\n\u003e memory hooks, so each UnsafeSharedMemoryRegion::Create() - every data\n\u003e pipe a renderer creates, every ipcz buffer, and (with the next CL) every\n\u003e BigBuffer over 64 KiB - is a synchronous round trip to the broker in the\n\u003e browser process, which creates the region on its IO thread and sends the\n\u003e descriptor back. Under load that wait is dominated by whatever else the\n\u003e browser IO thread is doing: with a page exchanging 128 KiB\n\u003e BroadcastChannel messages, strace shows the renderer main thread making\n\u003e 222 of these round trips and spending most of its blocked time in them.\n\u003e\n\u003e The hooks exist because creating a region used to mean opening a file in\n\u003e /dev/shm, which the sandbox forbids. With memfd-backed regions\n\u003e (https://crrev.com/c/8263816) an *unsafe* region needs no filesystem\n\u003e access at all: memfd_create(), ftruncate() and F_ADD_SEALS with the\n\u003e seals base uses are on the baseline seccomp policy\u0027s allowlist for\n\u003e exactly this reason (\"we need memfd_create for Mojo shared memory\").\n\u003e Writable regions still need procfs for their read-only descriptor and\n\u003e keep going through the broker, as do read-only regions.\n\u003e\n\u003e So:\n\u003e - base: add PlatformSharedMemoryRegion::CreateUnsafeAnonymous()\n\u003e (Linux/ChromeOS), which only ever uses memfd and never falls back to\n\u003e /dev/shm, returning an invalid region if the kernel has no\n\u003e memfd_create().\n\u003e - mojo: the unsafe-region hook tries CreateUnsafeAnonymous() first and\n\u003e only asks the broker if that fails, so behaviour on pre-3.17 kernels\n\u003e is unchanged.\n\u003e\n\u003e content_shell, page in a sandboxed renderer doing BroadcastChannel\n\u003e round trips through the browser (message -\u003e browser -\u003e other frame -\u003e\n\u003e reply), 30 interleaved runs per side, medians, with the memfd CL as the\n\u003e baseline for the renderer-side effect:\n\u003e 64 KiB 0.87 -\u003e 0.80 ms (ToT: 0.98)\n\u003e 1 MiB 11.9 -\u003e 11.4 ms (ToT: 11.9)\n\u003e 4 MiB 43.8 -\u003e 43.0 ms (ToT: 43.7)\n\u003e (numbers include the BigBuffer follow-up, which is what routes message\n\u003e payloads through this hook). strace: renderer-side synchronous broker\n\u003e round trips for that page 222 -\u003e 0; the renderer calls memfd_create()\n\u003e itself instead. No change for other platforms.\n\u003e\n\u003e Tested: base_unittests (new PlatformSharedMemoryRegionTest.\n\u003e CreateUnsafeAnonymous), mojo_unittests, content_unittests,\n\u003e blink_platform_unittests; content_browsertests --gtest_filter\u003d\n\u003e *SharedMemory*:*MessagePort*:*BroadcastChannel*:*DataPipe*:*Blob*:\n\u003e *Fetch*:*Canvas*:*Loader*:NavigationBrowserTest.*:*RenderProcessHost*\n\u003e (sandboxed renderers allocating through the new path); ASan\n\u003e base_unittests + mojo_unittests.\n\u003e\n\u003e Bug: 550464788\n\u003e Change-Id: I7cb454c0728cab10da6f4e7dbc813842f7f08182\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8262480\n\u003e Reviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\n\u003e Reviewed-by: Brian Geffon \u003cbgeffon@chromium.org\u003e\n\u003e Commit-Queue: Shelley Vohr \u003cshelley.vohr@gmail.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1686344}\n\u003e\n\nBug: 550464788\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Ia0cbda59bbe9d83f3068d3db043d426a1f8e801f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8300773\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686820}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f88a259088e3487e02a47005e9d905a22998ed56\n" }, { "commit": "8b6918958e825dd51f9ba8ea82555184ccd86955", "tree": "814164de2b7428015c58e5cdab3c3f4e9d811f98", "parents": [ "468f636371d718a3d108c81d35e3d465466fa2c0" ], "author": { "name": "S Ganesh", "email": "ganesh@chromium.org", "time": "Wed Aug 26 22:45:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 22:52:10 2026" }, "message": "Reland \"Reject Windows reserved device names in Storage Service\"\n\nThis is a reland of https://crrev.com/c/8221662 which was reverted in\nhttps://crrev.com/c/8283070 because the Windows reserved name validation\nwas checked on all platforms. On non-Windows platforms such as macOS,\ntypical database or file names (like \"aux\") are valid and their\nvalidation triggered Mojo deserialization failures.\n\nThis reland wraps the validation check and its tests under a\nBUILDFLAG(IS_WIN) preprocessor conditional so that the check is only\nexecuted on Windows where the sandbox bypass is relevant.\n\nTo address previous performance and code review feedback:\n- SplitStringOnce is extracted out of the loop in IsReservedNameOnWindows\n to avoid redundant string splitting up to 23 times per path component.\n- Added explanatory comments around the optimized prefix check.\n- Passed IsReservedNameOnWindows by function pointer to std::ranges::any_of\n to prevent potential compiler/toolchain overload ambiguities.\n\nOriginal change\u0027s description:\n\u003e storage.mojom.StrictRelativePath deserializes paths passed over\n\u003e Mojo IPC to FilesystemImpl. Previously, it only checked\n\u003e path.IsAbsolute() and path.ReferencesParent().\n\u003e\n\u003e On Windows, DOS reserved device names (such as CON, PRN, AUX,\n\u003e NUL, COM1-COM9, LPT1-LPT9, CLOCK$, CONIN$, CONOUT$) or names with\n\u003e trailing spaces/dots (which Win32 API canonicalization strips to\n\u003e the underlying device, e.g., \"con \") are not considered absolute\n\u003e or parent-referencing by base::FilePath. When FilesystemImpl\n\u003e appends such a relative path to its root directory, Win32 APIs\n\u003e resolve the path to system DOS devices (\\\\.\\\\CON, \\\\.\\\\NUL, etc.),\n\u003e bypassing the directory sandbox.\n\nBug: 497203958, 545283003\nChange-Id: Ieee521f20a134767a4a523d0b317cf58bf698ebb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8291418\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Evan Stade \u003cevanstade@microsoft.com\u003e\nCommit-Queue: S Ganesh \u003cganesh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686747}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 27bb7c8fa525405fe3ca40edf7f56d369cb25052\n" }, { "commit": "468f636371d718a3d108c81d35e3d465466fa2c0", "tree": "724ee5c7a00b7f91f2f30b2ac356ea593373d7b6", "parents": [ "55e57d44753fc72675504551e52b41dfb1f7273e" ], "author": { "name": "Luc Nguyen", "email": "lucnguyen@google.com", "time": "Wed Aug 26 21:51:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 22:02:55 2026" }, "message": "[FeatureList] Return RuntimeMutableFeatureUpdate from PrepareRuntimeMutableFeatureStateUpdate\n\nUpdate FeatureList::PrepareRuntimeMutableFeatureStateUpdate (previously\nUpdateRuntimeMutableFeatureState) to return a move-only\nRuntimeMutableFeatureUpdate object instead of applying the mutation\nimmediately.\n\nThis encapsulates the 3-phase execution of runtime mutable feature updates:\n1. RunPreMutationCallback()\n2. UpdateState()\n3. RunPostMutationCallback()\n\nCallers are required to invoke these three methods in sequence. The\nupdate object enforces via CHECK that all phases run to completion\nbefore destruction.\n\nBug: 536852124\n\nTAG\u003dagy\nCONV\u003da2efe21f-09e0-473e-a92b-592a9aa2ff50\n\nChange-Id: I4c85e6e24f335b5c69550af3c55191c432a87b96\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8290589\nReviewed-by: Roger McFarlane \u003crogerm@chromium.org\u003e\nCommit-Queue: Luc Nguyen \u003clucnguyen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686723}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 74e1e079b8f9f0e11584b78e7c4ecfcab3cd00dc\n" }, { "commit": "55e57d44753fc72675504551e52b41dfb1f7273e", "tree": "267f6179a02b3aeb0e7926e76d335c0768fc972c", "parents": [ "e175f5976f2478642bec84f037fd3b365d685a01" ], "author": { "name": "Petr Čermák", "email": "petrcermak@chromium.org", "time": "Wed Aug 26 21:49:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 22:01:59 2026" }, "message": "Log correct VSync interval (and its type) in scroll jank v4 trace events\n\nThis CL modifies cc::ScrollJankV4Decider, cc::ScrollJankV4Result and\ncc::ScrollJankV4TracingRecorder so that \"ScrollJankV4\" trace events\nwould contain the VSync interval that the decider actually used to\nevaluate scroll jank.\n\nBug: b:496563156\nChange-Id: I1abfabebc262e078370802d61be6e0a5b7f74ad1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8291573\nAuto-Submit: Petr Cermak \u003cpetrcermak@chromium.org\u003e\nCommit-Queue: Petr Cermak \u003cpetrcermak@chromium.org\u003e\nReviewed-by: Kartar Singh \u003ckartarsingh@google.com\u003e\nCommit-Queue: Kartar Singh \u003ckartarsingh@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686721}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 50d2bd43453fa40cfaf91b401036536297e88117\n" }, { "commit": "e175f5976f2478642bec84f037fd3b365d685a01", "tree": "c5ae5afb4985cbc680f33f3c2bb147c9b95cc654", "parents": [ "e480bdbaf170763cd8b826f94efbebe4458d09bd" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 26 21:46:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 21:56:11 2026" }, "message": "Spanification of shim/allocator_shim_default_dispatch_to_partition_alloc.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ife8725bd3163241e381f110b48e320591101610d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7828614\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686718}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 451f93fedef087e522c3545ba420b766843cf747\n" }, { "commit": "e480bdbaf170763cd8b826f94efbebe4458d09bd", "tree": "717bdd58bfd93baae7e69c02aeb4fc7433baf181", "parents": [ "4a2e4e18c0d3eda956d96e411517b4fd38f9e71a" ], "author": { "name": "Tom Sepez", "email": "tsepez@google.com", "time": "Wed Aug 26 21:21:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 21:32:01 2026" }, "message": "Clear UserData early during RenderProcessHost destruction\n\nRenderProcessHost instances can have UserData attached whose destructors\naccess or trace the host (e.g. via virtual methods like WriteIntoTrace).\nIf UserData is destroyed during base SupportsUserData destruction, the\nderived host destructor has already finished, causing virtual dispatch\non partially destructed objects.\n\nExplicitly calling ClearAllUserData() early in the destructor of\nRenderProcessHostImpl and MockRenderProcessHost ensures that attached\nUserData instances are destroyed while the host\u0027s vtable and state\nremain fully valid.\n\n-- Update documentation to explain the lurking danger.\n\nTAG\u003dagy\nCONV\u003da188bbc7-fd9c-44c2-8795-930db4c804a0\n\nBug: 550379229\nChange-Id: I0f8ea00fe9b3ce526f3043e7b86533f227748ee7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279050\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Nasko Oskov \u003cnasko@chromium.org\u003e\nCommit-Queue: Tom Sepez \u003ctsepez@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686688}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5c63594fcd0791103348734025b4d7054bffa275\n" }, { "commit": "4a2e4e18c0d3eda956d96e411517b4fd38f9e71a", "tree": "58af6bcaab7200d3fc9ee3fde0a01e8c0a53c59c", "parents": [ "ccae584e4a8811b32d293b01e64bd593a3ce1696" ], "author": { "name": "Liam Brady", "email": "lbrady@google.com", "time": "Wed Aug 26 20:58:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 21:04:50 2026" }, "message": "Exclude same-site subframes of ad frames from origin isolation.\n\nThis CL excludes same-site subframes of ad frames from origin isolation\nso they remain in the same site-keyed process as their parent ad frame.\nNavigation requests now check for same-site ad ancestors and propagate\nsite-keying status through process selection and security checks. This\nalso re-enables the NestedSameSiteSubframeInsideAdFrameIsSiteKeyed\nbrowser test, which verifies this behavior.\n\nBug: 40259221\nChange-Id: I8a616b6b5dd7ee8ba6d93b8e65b30beb1993133a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8169121\nReviewed-by: Alex Moshchuk \u003calexmos@chromium.org\u003e\nReviewed-by: Siddhartha S \u003cssid@chromium.org\u003e\nCommit-Queue: Liam Brady \u003clbrady@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686658}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3e7390c42d9e8856503f087d310ca71e2040eb6d\n" }, { "commit": "ccae584e4a8811b32d293b01e64bd593a3ce1696", "tree": "bfd59e04275675b1366ac09b00e7b66e44a36e46", "parents": [ "233b42ce2fe77afd9cf18a4dbc9e1c8302f72832" ], "author": { "name": "Kartar Singh", "email": "kartarsingh@google.com", "time": "Wed Aug 26 20:31:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 20:35:03 2026" }, "message": "[chrome stdlib] Add is_fully_captured field to chrome_scrolls table\n\nAdd a new boolean field `is_fully_captured` to `chrome_scrolls` table in\nthe Chrome Perfetto standard library.\n\nA scroll is considered fully captured (`is_fully_captured \u003d TRUE`) if\nboth:\n1. `FIRST_GESTURE_SCROLL_UPDATE` is present for the scroll (indicating\n that the trace did not start mid-scroll).\n2. A corresponding gesture scroll end event (`GESTURE_SCROLL_END`,\n `INERTIAL_GESTURE_SCROLL_END`, or `InputLatency::GestureScrollEnd`)\n is present in the trace for that scroll before any subsequent scroll\n begins (indicating that the trace did not terminate mid-scroll).\n\nAlso update diff tests to test and verify both complete and incomplete\nscroll cases.\n\nPERFETTO_TESTS\u003d`autoninja -C out/Default perfetto_diff_tests \u0026\u0026\nout/Default/bin/run_perfetto_diff_tests`\n\nTAG\u003dagy\n\nBug: b:552367195\nChange-Id: I81b58192707640c5394106aee671c2519288238d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8278474\nReviewed-by: Petr Cermak \u003cpetrcermak@chromium.org\u003e\nCommit-Queue: Kartar Singh \u003ckartarsingh@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686624}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b5252f8c63d0e7459ab5edc3bb01f4fa9f90a797\n" }, { "commit": "233b42ce2fe77afd9cf18a4dbc9e1c8302f72832", "tree": "6566055d6c1cc7deb3ba4796606aa3959b28d1a4", "parents": [ "2f99cfd8190ffd8096e022d138cede2802f2fabe" ], "author": { "name": "Jesse McKenna", "email": "jessemckenna@google.com", "time": "Wed Aug 26 20:18:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 20:23:36 2026" }, "message": "etw-stackwalk: send debug GUIDs from browser\n\nThis change has the browser process retrieve debug GUIDs for a set of\nmodules of interest, to enable call stacks on Event Tracing for Windows\n(ETW) events to be symbolized (if ETW call stacks are ultimately\nenabled). It tries to get the debug info from the modules directly if\nthey\u0027re loaded, and reads their debug info from disk (using the expected\nlocation of the module) if not.\n\nThe companion Perfetto change (which should be merged before\nthis can land) is here:\nhttps://github.com/google/perfetto/pull/7183\n\nBased on spvm@\u0027s prototype:\nhttps://chromium-review.git.corp.google.com/c/chromium/src/+/7598112\n\nBug: 400769265\nChange-Id: I721dc71274b7390000a8f9d99e7793eeb89caae7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7793565\nReviewed-by: Alex Rudenko \u003calexrudenko@chromium.org\u003e\nReviewed-by: Etienne Pierre-Doray \u003cetiennep@chromium.org\u003e\nReviewed-by: Sean Maher \u003cspvm@chromium.org\u003e\nCommit-Queue: Jesse McKenna \u003cjessemckenna@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686614}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c9fb449fe56d32b0c139c70c37a6f1732044e771\n" }, { "commit": "2f99cfd8190ffd8096e022d138cede2802f2fabe", "tree": "ee9af6cd60a8bf3cd0bc7b9cc704b1f9df46b855", "parents": [ "b8efd71af95e00f24a0ca52632ee328b26d99ab4" ], "author": { "name": "Beomsu Kim", "email": "diego97523@gmail.com", "time": "Wed Aug 26 18:02:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 18:07:19 2026" }, "message": "[base] Add nocompile tests for SequenceBound\n\nAsyncCall() enforces the order AsyncCall-\u003eWithArgs-\u003eThen. But nothing\nverified this. SequenceBoundTest.NoCompileTests held only comments, so\nit passed while protecting nothing.\n\nSo this CL moves the checks to the nocompile harness. The new file\ncovers calling WithArgs() on a method that takes no arguments, and\ncalling Then() before WithArgs() on one that takes them. Both cases run\nagainst SequenceBound\u003cT\u003e and SequenceBound\u003cstd::unique_ptr\u003cT\u003e\u003e.\n\nNo-compile tests for converting between the two forms are not added\nhere, since the conversion is not constrained yet. That TODO moves to\nthe new file rather than being dropped.\n\nBug: 40245687\nTest: autoninja -C out/Default base_nocompile_tests\nTest: base_unittests --gtest_filter\u003d\u0027SequenceBound*\u0027\nChange-Id: Id2c434161e47f25c4be2fa225cf380cd80940fe7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8284898\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686552}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ca12a8318ab4fb588529a87b0d7099b2621a6321\n" }, { "commit": "b8efd71af95e00f24a0ca52632ee328b26d99ab4", "tree": "fa282db1a7bf7760c01acef69f0f4c7ecc88f25a", "parents": [ "76130d508e6a46f982feb11f9e8fe44491e08be8" ], "author": { "name": "Justin Cohen", "email": "justincohen@google.com", "time": "Wed Aug 26 15:53:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 16:02:41 2026" }, "message": "base: Remove CheckHeapIntegrity and CheckMetadataIntegrity\n\nThe last caller of base::CheckHeapIntegrity has been removed. This CL\nremoves base::CheckHeapIntegrity, base::allocator::CheckHeapIntegrity,\nand partition_alloc::PartitionRoot::CheckMetadataIntegrity.\n\nStatic analysis of callers of corrupted memory proved to be a more\neffective approach for debugging `free()` issues.\n\nBug: None\nChange-Id: Ic707fe5488b6cca7c4aad587e0426fd90e18689f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276173\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nCommit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686428}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f4220d71a741e49ff44f5f6d6ce3a9c612538c52\n" }, { "commit": "76130d508e6a46f982feb11f9e8fe44491e08be8", "tree": "d65f34726523982ce3b73fd7bd469e4cbeb6448c", "parents": [ "d5950fb31340eacd34bd60bea93b27ecc93bbc1a" ], "author": { "name": "Alexei Svitkine", "email": "asvitkine@chromium.org", "time": "Wed Aug 26 15:07:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 15:12:11 2026" }, "message": "Fix potential integer overflow in FieldTrialList::GetParamsFromSharedMemory\n\nUse base::CheckedNumeric to calculate the actual size of the FieldTrialEntry\nplus its pickle data. This prevents an integer overflow if the pickle_size\nstored in shared memory is corrupted/maliciously set to a huge value,\nwhich could otherwise lead to an out-of-bounds read.\n\nBug: 513714849\n\nTAG\u003dagy\nCONV\u003db41b68e5-128d-4ced-a8a0-71ddd5e476a9\n\nChange-Id: I565224eaa9b1facc9558f7509c537eee5b35e3ef\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8297538\nCommit-Queue: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nReviewed-by: Luc Nguyen \u003clucnguyen@google.com\u003e\nAuto-Submit: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nCommit-Queue: Luc Nguyen \u003clucnguyen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686402}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7ad22ffdfb5ed234ae2c5433e4e77c61b08236d9\n" }, { "commit": "d5950fb31340eacd34bd60bea93b27ecc93bbc1a", "tree": "1e3c9dff8dba6e88c6005727249bd95a92e0729e", "parents": [ "62bb2bbf4db059bdfb96a13666ed979c09ab0165" ], "author": { "name": "Shelley Vohr", "email": "shelley.vohr@gmail.com", "time": "Wed Aug 26 13:51:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 13:58:22 2026" }, "message": "[mojo] Allocate unsafe shared memory regions in-process on Linux\n\nOn Linux and ChromeOS every sandboxed process installs base\u0027s shared\nmemory hooks, so each UnsafeSharedMemoryRegion::Create() - every data\npipe a renderer creates, every ipcz buffer, and (with the next CL) every\nBigBuffer over 64 KiB - is a synchronous round trip to the broker in the\nbrowser process, which creates the region on its IO thread and sends the\ndescriptor back. Under load that wait is dominated by whatever else the\nbrowser IO thread is doing: with a page exchanging 128 KiB\nBroadcastChannel messages, strace shows the renderer main thread making\n222 of these round trips and spending most of its blocked time in them.\n\nThe hooks exist because creating a region used to mean opening a file in\n/dev/shm, which the sandbox forbids. With memfd-backed regions\n(https://crrev.com/c/8263816) an *unsafe* region needs no filesystem\naccess at all: memfd_create(), ftruncate() and F_ADD_SEALS with the\nseals base uses are on the baseline seccomp policy\u0027s allowlist for\nexactly this reason (\"we need memfd_create for Mojo shared memory\").\nWritable regions still need procfs for their read-only descriptor and\nkeep going through the broker, as do read-only regions.\n\nSo:\n - base: add PlatformSharedMemoryRegion::CreateUnsafeAnonymous()\n (Linux/ChromeOS), which only ever uses memfd and never falls back to\n /dev/shm, returning an invalid region if the kernel has no\n memfd_create().\n - mojo: the unsafe-region hook tries CreateUnsafeAnonymous() first and\n only asks the broker if that fails, so behaviour on pre-3.17 kernels\n is unchanged.\n\ncontent_shell, page in a sandboxed renderer doing BroadcastChannel\nround trips through the browser (message -\u003e browser -\u003e other frame -\u003e\nreply), 30 interleaved runs per side, medians, with the memfd CL as the\nbaseline for the renderer-side effect:\n 64 KiB 0.87 -\u003e 0.80 ms (ToT: 0.98)\n 1 MiB 11.9 -\u003e 11.4 ms (ToT: 11.9)\n 4 MiB 43.8 -\u003e 43.0 ms (ToT: 43.7)\n(numbers include the BigBuffer follow-up, which is what routes message\npayloads through this hook). strace: renderer-side synchronous broker\nround trips for that page 222 -\u003e 0; the renderer calls memfd_create()\nitself instead. No change for other platforms.\n\nTested: base_unittests (new PlatformSharedMemoryRegionTest.\nCreateUnsafeAnonymous), mojo_unittests, content_unittests,\nblink_platform_unittests; content_browsertests --gtest_filter\u003d\n*SharedMemory*:*MessagePort*:*BroadcastChannel*:*DataPipe*:*Blob*:\n*Fetch*:*Canvas*:*Loader*:NavigationBrowserTest.*:*RenderProcessHost*\n(sandboxed renderers allocating through the new path); ASan\nbase_unittests + mojo_unittests.\n\nBug: 550464788\nChange-Id: I7cb454c0728cab10da6f4e7dbc813842f7f08182\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8262480\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Brian Geffon \u003cbgeffon@chromium.org\u003e\nCommit-Queue: Shelley Vohr \u003cshelley.vohr@gmail.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686344}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 33864563d0fa4f0195649c916f8997a743d5ad22\n" }, { "commit": "62bb2bbf4db059bdfb96a13666ed979c09ab0165", "tree": "8520900ebbbe583f6c06602baaac35961f417c98", "parents": [ "8bae81c2236f87712d74658057037504b4ce280e" ], "author": { "name": "François Doray", "email": "fdoray@chromium.org", "time": "Wed Aug 26 13:51:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 13:57:07 2026" }, "message": "Launch MallocDumpDoNotWalkFreeList.\n\nThis successfully increases the success rate of memory metrics\ncollection attempts, by eliminating unnecessary work during that\noperation.\n\ngo/mallocdumpdonotwalkfreelist-stable-results-june2026\n\nChange-Id: I3ee76971c344d58803037fd27e06ffe5105895ef\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279879\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686343}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 05f6779d8ed7f192aac53d140f1602613dc29378\n" }, { "commit": "8bae81c2236f87712d74658057037504b4ce280e", "tree": "9ba16a8c6f30f759ffbbc232eb4d9a1edc8bb7cf", "parents": [ "16ef5bc08eb440550142a45cbb124448118f99b7" ], "author": { "name": "Anand Ravi", "email": "anandrv@google.com", "time": "Tue Aug 25 23:22:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 23:27:35 2026" }, "message": "Allow overriding metric tags at acquisition time in TaggedAutoLock.\n\nAdd overloads to `TaggedAutoLock` and `TaggedMetricLock::Acquire` to\nallow callers to override the custom tag at acquisition time. Also\nupdates base_unittests to verify per-acquisition tag overriding under\ncontention.\n\nBug: 518786382\nChange-Id: I6f22b564765c6ddf292b6e19158c16c1da558ac5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8192155\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Anand Ravi \u003canandrv@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685995}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 80745843ef598f82d02c60bacc758fc7c6b558f9\n" }, { "commit": "16ef5bc08eb440550142a45cbb124448118f99b7", "tree": "beb78dfa770ef04fd74d68e465f2a9d44a6e9836", "parents": [ "d30b6c076e1d4a87e19abbe0aa6c018fe568d008" ], "author": { "name": "Patrick Monette", "email": "pmonette@chromium.org", "time": "Tue Aug 25 18:15:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 18:22:34 2026" }, "message": "Reland \"[Memory Coordinator] Introduce base::MemoryLimit strong type\"\n\nThis is an exact reland of commit\n038782fe135af659a2d239db8c8cf8501ab1201e, now that the fix\nhttps://chromium-review.git.corp.google.com/c/chromium/src/+/8261990 has\nlanded.\n\nOriginal change\u0027s description:\n\u003e [Memory Coordinator] Introduce base::MemoryLimit strong type\n\u003e\n\u003e Introduces base::MemoryLimit to represent memory usage limit percentages\n\u003e for the Memory Coordinator and MemoryConsumer API.\n\u003e\n\u003e Previously, memory limits were represented as a raw `int`, which caused\n\u003e confusion about whether values represented raw bytes, kilobytes, or\n\u003e percentages.\n\u003e\n\u003e base::MemoryLimit provides:\n\u003e - Named constructor (FromPercent)\n\u003e - Standard thresholds (Default, NoPressureThreshold,\n\u003e ModeratePressureThreshold, CriticalPressureThreshold)\n\u003e - Scaling helpers for integral types and base::ByteSize\n\u003e - Implicit int interop to facilitate phased migration across Chromium\n\u003e\n\u003e Note that apart from 2 required changes to ensure compilation in\n\u003e components/viz/ and storage/, this change doesn\u0027t contain any migration\n\u003e yet.\n\u003e\n\u003e Skip-Clang-Tidy-Checks: google-explicit-constructor\n\u003e Bug: 441951621\n\u003e Change-Id: If8c1348ba2a78f633202c91c10be0f875e3d5330\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257313\n\u003e Reviewed-by: Andres Ricardo Perez Rojas \u003candresrperez@chromium.org\u003e\n\u003e Reviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\n\u003e Reviewed-by: Mingyu Lei \u003cleimy@chromium.org\u003e\n\u003e Commit-Queue: Patrick Monette \u003cpmonette@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1679870}\n\nBug: 441951621\nChange-Id: I081bd892b74355329d465cd2d7736e94f1d7eabc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8288629\nOwners-Override: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Gabriel Charette \u003cgab@chromium.org\u003e\nReviewed-by: Andres Ricardo Perez Rojas \u003candresrperez@chromium.org\u003e\nReviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685769}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 355637dba47869354a92a1a8a7ea879a6f7cca47\n" }, { "commit": "d30b6c076e1d4a87e19abbe0aa6c018fe568d008", "tree": "cb840d9fd7f9bd1899450ea323a4b2d9303f30e2", "parents": [ "a4835eddf8e68cdcaa4ddb60461bb95b71afd1de" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Tue Aug 25 15:42:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 15:47:44 2026" }, "message": "[LanguageTag] Remove l10n_util::GetLanguage and migrate remaining callsites\n\nThis CL replaces the last remaining callsites of the legacy\n`l10n_util::GetLanguage` in `ui/base/` with the type-safe\n`base::i18n::GetLanguageTagFromString` API, and completely removes\n`l10n_util::GetLanguage` from `ui/base/l10n/l10n_util.h` and\n`ui/base/l10n/l10n_util.cc`.\n\nBug: None\nChange-Id: I6456314a8ef38fbf5911f9dbaadf8bcec5fb285d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8238358\nCommit-Queue: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Avi Drissman \u003cavi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685599}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b6fc5d3c9a09f4c0ffc25d2f358ab496f4c89726\n" }, { "commit": "a4835eddf8e68cdcaa4ddb60461bb95b71afd1de", "tree": "c05fde74a53e285ebd6bac216441b2e022d0844d", "parents": [ "6f762ce48bd43a39d05c45237ed54d9902185b04" ], "author": { "name": "Avi Drissman", "email": "avi@chromium.org", "time": "Tue Aug 25 15:28:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 15:34:02 2026" }, "message": "Fix Windows 11 requirement testing\n\nAs per https://www.microsoft.com/en-us/windows/windows-11-specifications\nthe RAM and storage requirements are measured in gigabytes, not\nmegabytes. This isn\u0027t the 90s.\n\nWhile here, switch to non-deprecated disk space calls.\n\nBug: none\nOBSOLETE_HISTOGRAMS\u003dWindows.Win11HardwareRequirements2{Type}Check is broken and replaced by Windows.Win11HardwareRequirements2.{Type}Check\nOBSOLETE_HISTOGRAM[Windows.Win11UpgradeEligible]\u003dBroken and replaced by Windows.Win11UpgradeEligible2\nChange-Id: I698c702236cc0f12ea7dfab484d1fbd26a6a6964\n\nChange-Id: I698c702236cc0f12ea7dfab484d1fbd26a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8282795\nCommit-Queue: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Eshwar Stalin \u003cestalin@chromium.org\u003e\nAuto-Submit: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: David Bienvenu \u003cdavidbienvenu@chromium.org\u003e\nReviewed-by: Foromo Daniel Soromou \u003ckoretadaniel@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685581}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 224a201ce42f9e5bb1767851e8470c612d693382\n" }, { "commit": "6f762ce48bd43a39d05c45237ed54d9902185b04", "tree": "2419b4f68bb551cb76bf550a971a9bc6e7365dde", "parents": [ "e72d13b1de3c6ad4aefe339c2ed79e1abb56461d" ], "author": { "name": "Avi Drissman", "email": "avi@chromium.org", "time": "Tue Aug 25 15:22:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 15:29:34 2026" }, "message": "Use base::ByteSize for net/disk_cache/cache_util.h\n\nBug: 549176204\nChange-Id: I209fb4f0a8cd5285d4a33303c64108176a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8264083\nCommit-Queue: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Josh Karlin \u003cjkarlin@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685575}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0bf95aaa316f64ce1dc132a33f9ca6a475e3e708\n" }, { "commit": "e72d13b1de3c6ad4aefe339c2ed79e1abb56461d", "tree": "4c3808cc4a2c1dc28e3d75b8a6814e1c939de550", "parents": [ "9947700bc792ac2a29767372012d768399892eb1" ], "author": { "name": "Keigo Oka", "email": "oka@google.com", "time": "Tue Aug 25 14:28:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 14:34:22 2026" }, "message": "base: Run jni_zero C++ unit tests in base_unittests\n\njni_zero_unittests has no bot coverage today, so the JniUniquePtr\ntemplate-deleter and move-semantics tests only ever run when a developer\nbuilds them locally. Link the test sources into base_unittests on Android\nso CI/CQ exercises them on every change, while keeping the standalone\njni_zero_unittests binary for local iteration and for the jni_zero_tests\ngroup.\n\nBug: 40794873\nTAG\u003dagy\nCONV\u003d9d8066d1-de31-41b4-9093-054426041c40\n\nChange-Id: If41e2c349ee8a9a2604c5738e1ae919eda581a6b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257204\nAuto-Submit: Keigo Oka \u003coka@chromium.org\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685522}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d22d2304d71edf167f7f3bfdf88203917433c4a0\n" }, { "commit": "9947700bc792ac2a29767372012d768399892eb1", "tree": "f8c07e7491ebd1ce85ab5bd07af982e8cacb3b65", "parents": [ "b1da33df75a072b7770a4a4e081384abec8bd039" ], "author": { "name": "Gregg Tavares", "email": "gman@google.com", "time": "Tue Aug 25 08:16:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 08:22:52 2026" }, "message": "PAlloc: Use less space for power-of-2 sized AlignedAlloc.\n\nBefore this change, when working with AlignedAlloc we will\nrounded up to the next power of two, this sadly had a bad\nconsequence when the size itself is a power of two. Given\nthat in most Partitions PartitionAlloc has to store the\ninline metadata as well, this will make the size be just\never so slightly larger than a power of two, and then we\u0027d\nwaste basically double the requested size.\n\nThis CL fixes it to just round up to the alignment size\nafter adding space for the metadata.\n\nNote: There was a comment to the effect of:\n\n// PartitionAlloc only guarantees alignment for power-of-two\n// sized allocations.\n\nThat comment was a little off. Within a bucket, every allocation is\naligned to that bucket\u0027s slot size.\n\nBug: 491627887\nChange-Id: I250bf9eb645717eccf98db15d37f0a206a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8273137\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Gregg Tavares \u003cgman@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685354}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d44365c54646dfab8693c578e9ac435bf807b8d4\n" }, { "commit": "b1da33df75a072b7770a4a4e081384abec8bd039", "tree": "9430feef52fc24d72c6b6b1f3083370b21db43a0", "parents": [ "b1c54042237ddce30aa4a42bb45803f08f2b5cc8" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Aug 25 07:31:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 07:38:13 2026" }, "message": "PA: Mark `GetSlotUsableSize()` `const`\n\nAlso, move the two-argument version closer to the one-argument version,\njust to make it more obvious they are both implemented in\n`partition_root_internal.h`.\n\nChange-Id: I825fd0d019117f8896952414ca0e4ed5cf61e267\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8282557\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685306}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2c82d0992ff313afaafaec8d1a3b6f1447b223f5\n" }, { "commit": "b1c54042237ddce30aa4a42bb45803f08f2b5cc8", "tree": "217497703d539808b90276db1ff30550b71b52d2", "parents": [ "ec58fa25b7269db7ae8a5d4b8f91a4c6fb3a3b80" ], "author": { "name": "Victor Hugo Vianna Silva", "email": "victorvianna@google.com", "time": "Tue Aug 25 06:41:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 06:46:57 2026" }, "message": "[Android Linker] Restore PFD dup in LibInfo\n\nSuccessful PGO bot run:\nhttps://ci.chromium.org/ui/p/chrome/builders/try/android-arm64-pgo/381\n\nIn crrev.com/c/8249420, info.fd.dup().detachFd() was replaced with\ninfo.fd.detachFd() on the premise that info.fd is ephemeral because\nBinder already copies the fd on transmission. That holds for a child\nprocess receiving a bundle, but not for the browser: in\nChildProcessLauncherHelperImpl.distributeZygoteInfo(), the App Zygote\u0027s\nIRelroLibInfo is stored in the static sZygoteInfo and then consumed\nlocally via takeSharedRelrosFromAidl() on that same object. detachFd()\ntransfers ownership of the fd away from the ParcelFileDescriptor,\nleaving sZygoteInfo.fd unusable. Every subsequent reuse of sZygoteInfo\n(relroInfo for new launches, consumeRelroLibInfo() to existing\nconnections) then fails to marshal the detached PFD. That throws a\nRuntimeException, not a RemoteException, so it is caught by neither\nChildProcessConnection.consumeRelroLibInfo() nor doConnectionSetup(),\nand kills the launcher thread. On PGO bots this surfaced as the browser\ndying at startup, reported as a DevTools timeout.\n\nThis restores info.fd.dup().detachFd() so IRelroLibInfo.fd stays valid\nacross uses, and adds a unit test that fails without the fix (the\nParcelFileDescriptor shadow now tracks detachment instead of returning\na constant fd).\n\nOnly the dup() removal from crrev.com/c/8249420 is reverted; its JNI\nstring optimization and the newRemote.close() leak fix are kept. The\nlatter is only correct with the dup() in place.\n\nFollow-up: the child-process path still drops the received info.fd\nwithout close(), leaving it to GC. The fix there is to close it, not to\nremove the dup(). See crbug.com/546796117.\n\nFixed: 546796117\nChange-Id: I95550aa574df95f8841e0cb381037baae83deacb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276761\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nAuto-Submit: Victor Vianna \u003cvictorvianna@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685274}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9d728f73dd5798b6cdef64b1dbe3270a04aca336\n" }, { "commit": "ec58fa25b7269db7ae8a5d4b8f91a4c6fb3a3b80", "tree": "37fc12ebb544b37b4e3d0219046be984afda2b15", "parents": [ "8c5a0c7792f353420afcc7a24e52ca697f049e28" ], "author": { "name": "S Ganesh", "email": "ganesh@chromium.org", "time": "Tue Aug 25 02:22:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 02:30:05 2026" }, "message": "Revert \"Reject Windows reserved device names in Storage Service StrictRelativePath\"\n\nThis reverts commit edcbb5b03ce84a017b028416a34d2d8316f7b10f.\n\nReason for revert: Possibly causing Chrome_Mac: Crash Report - [Dump without crash] content::BrowserChildProcessHostImpl::OnMojoError - Validation failed for storage.mojom.Directory.3 [VALIDATION_ERROR_DESERIALIZATION_FAILED]\n\nFailure Link: https://crbug.com/545283003\n\nOriginal change\u0027s description:\n\u003e Reject Windows reserved device names in Storage Service StrictRelativePath\n\u003e\n\u003e storage.mojom.StrictRelativePath deserializes paths passed over\n\u003e Mojo IPC to FilesystemImpl. Previously, it only checked\n\u003e path.IsAbsolute() and path.ReferencesParent().\n\u003e\n\u003e On Windows, DOS reserved device names (such as CON, PRN, AUX,\n\u003e NUL, COM1-COM9, LPT1-LPT9, CLOCK$, CONIN$, CONOUT$) or names with\n\u003e trailing spaces/dots (which Win32 API canonicalization strips to\n\u003e the underlying device, e.g., \"con \") are not considered absolute\n\u003e or parent-referencing by base::FilePath. When FilesystemImpl\n\u003e appends such a relative path to its root directory, Win32 APIs\n\u003e resolve the path to system DOS devices (\\\\.\\CON, \\\\.\\NUL, etc.),\n\u003e bypassing the directory sandbox.\n\u003e\n\u003e This change:\n\u003e 1. Adds conin$ and conout$ to kMagicNames (exact match) in\n\u003e base::IsReservedNameOnWindows.\n\u003e 2. Trims trailing spaces and dots prior to validation in\n\u003e base::IsReservedNameOnWindows to prevent Win32 path\n\u003e canonicalization bypasses.\n\u003e 3. Enforces base::IsReservedNameOnWindows validation across all\n\u003e platforms during StrictRelativePath Mojom traits deserialization.\n\u003e 4. Adds unit tests in file_util_unittest.cc and\n\u003e strict_relative_path_mojom_traits_unittest.cc.\n\u003e\n\u003e BUG\u003d497203958\n\u003e\n\u003e Change-Id: I8d51d59457cc20eb0b8e72d5cd177f09b1864b8f\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8221662\n\u003e Reviewed-by: Evan Stade \u003cevanstade@microsoft.com\u003e\n\u003e Reviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\n\u003e Commit-Queue: S Ganesh \u003cganesh@chromium.org\u003e\n\u003e Reviewed-by: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1676936}\n\nBug: 497203958,545283003\nChange-Id: Ibe67270a6a6cf7308dc86ef3b45645c81684181e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8283070\nAuto-Submit: S Ganesh \u003cganesh@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: S Ganesh \u003cganesh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685202}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a8597aa126e2010c6ebbe46adb23bd02f505b3fc\n" }, { "commit": "8c5a0c7792f353420afcc7a24e52ca697f049e28", "tree": "fb26eed87fc97fdbcc988f3f351a32dff4e6b71f", "parents": [ "7114133096f2ff636c7acb0ee1d55a2c6bd2cba6" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Tue Aug 25 02:17:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 02:23:56 2026" }, "message": "Use ScopedDefaultIcuLocale in tests: //base targets\n\nChange-Id: I24bc2a4d7c4e87085679326b5d306f02a3d6c9bd\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276717\nReviewed-by: Greg Thompson \u003cgrt@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685196}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 102f3765fe4055f079946b440b9a841c9eb3e722\n" }, { "commit": "7114133096f2ff636c7acb0ee1d55a2c6bd2cba6", "tree": "496239628be706e7d611e571bd770043b8ec3c57", "parents": [ "6f5748325f50b306e8411209804a2e2041876cad" ], "author": { "name": "Henrique Nakashima", "email": "hnakashima@chromium.org", "time": "Tue Aug 25 00:42:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 00:47:08 2026" }, "message": "[Android] Use WeakHashMap for listeners in InMemorySharedPreferences\n\nIn the android.app.SharedPreferencesImpl, listeners are held weakly\nusing WeakHashMap\u003cOnSharedPreferenceChangeListener, Object\u003e so that\nSharedPreferences does not hold strong references to listeners or their\nenclosing components (Activities, Fragments, this Pane).\n\nPreviously, InMemorySharedPreferences used a strong ArrayList for\nmObservers and registered a ResettersForTesting callback for every\nlistener. This caused destroyed activities and components to be retained\nacross tests and fail LeakCanary checks.\n\nThis CL:\n- Changes InMemorySharedPreferences.mObservers to a Set backed by\n WeakHashMap, matching the Android OS SharedPreferencesImpl behavior.\n- Removes ResettersForTesting from\n InMemorySharedPreferences.registerOnSharedPreferenceChangeListener.\n\nBug: 545192177\nChange-Id: I77f61460584b8b81be775565032a4776c8f3a87b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8244001\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Henrique Nakashima \u003chnakashima@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685106}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cb7a3d14d88965db6625601b80b520b527b491a4\n" }, { "commit": "6f5748325f50b306e8411209804a2e2041876cad", "tree": "bd09ad7341330a7e404f2b81159b9858de6bc197", "parents": [ "a386abe2d909f35f14823e7816e525faf9082592" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Tue Aug 25 00:02:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 00:08:18 2026" }, "message": "Migrate aw_main_delegate.cc to use the new ICU locale setter\n\nChange-Id: I357f3e1e2cd341419835f09221390f4f057aa4a8\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279692\nReviewed-by: Richard Coles \u003ctorne@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685089}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0072cea6b0e9563e53e1e19cfb7048be9e0a0eb3\n" }, { "commit": "a386abe2d909f35f14823e7816e525faf9082592", "tree": "792912d82de11dab0a9e4ac3f6564b5fa740e7e1", "parents": [ "19bf2f002105dd1514f72af179665243b185bde1" ], "author": { "name": "Luc Nguyen", "email": "lucnguyen@google.com", "time": "Mon Aug 24 23:32:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 23:39:14 2026" }, "message": "Add pre- and post-mutation callbacks to RuntimeMutableFeatureState\n\nUpdate RuntimeMutableFeatureState and FeatureList::EnableRuntimeMutability\nto take two callbacks: pre_mutation_callback (invoked right before\nmutating the feature override state) and post_mutation_callback (invoked\nright after mutating the state).\n\nUpdate all callsites in base/, components/metrics/, and\ncomponents/variations/ to pass both callbacks and add unit test coverage\nverifying the order and behavior of both callbacks.\n\nTAG\u003dagy\nCONV\u003d7088d36a-5624-4c1b-803f-2a378709ee46\n\nChange-Id: Ibe3e4ccaaa363405487069e67d069506278bc6c4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8258125\nReviewed-by: Roger McFarlane \u003crogerm@chromium.org\u003e\nCommit-Queue: Luc Nguyen \u003clucnguyen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685049}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0d5d4d2a7a5fb6a5b3eb010dd89f37b08b071c0b\n" }, { "commit": "19bf2f002105dd1514f72af179665243b185bde1", "tree": "74f4ae657a055566dbc948365dd0a997b630a44b", "parents": [ "a1e6a6099aae3429cc898d5f3dff0f9e1c5c6f83" ], "author": { "name": "Egor Pasko", "email": "pasko@chromium.org", "time": "Mon Aug 24 21:38:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 21:47:58 2026" }, "message": "message loop: Fix message_pump_kqueue wakeup counter\n\nThe thread wakeup count histogram aims at counting wakeups behind\nreal work, as mentioned in the metric description.\n\nHowever, on MacOS we currently increment the counter on spurious timer\nwakeups as well.\n\nChange the metric to ignore these spurious wakeups.\n\nAs spvm@ pointed out, recording the histogram on MacOS shows up in 30%\nof browser IO thread samples from the Sampling Profiler. This is\nprobably happening during idle times, so it should not cause performance\nproblems. After this change we expect the time spent on the browser IO\nthread to drop to near zero amount, as it is on other platforms.\n\nOBSOLETE_HISTOGRAMS\u003dPatterned histogram Scheduling.MessagePump.WakeupCount.{ThreadName} is replaced by Scheduling.MessagePump.WakeupCount2.{ThreadName}\n\nBug: 477298286\nChange-Id: I29136b99aea858d33ed40836c8f446887f239c53\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8270329\nCommit-Queue: Egor Pasko \u003cpasko@chromium.org\u003e\nReviewed-by: Joe Mason \u003cjoenotcharles@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1685028}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b815e97cab28c0ea7276d9e78a06f75f5610fc8f\n" }, { "commit": "a1e6a6099aae3429cc898d5f3dff0f9e1c5c6f83", "tree": "40390f4e0b850d8b05e377ad67d27099efd55987", "parents": [ "0ade30bbce54465be41afe333c50746ac8999823" ], "author": { "name": "Evan Stade", "email": "evanstade@microsoft.com", "time": "Mon Aug 24 20:27:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 20:41:28 2026" }, "message": "Avoid browser crash when out of FDs on Linux\n\nWhen the browser process hits its FD limit, and a sandboxed process\n(renderer) calls OOP localtime, the browser process would securely\ncrash. This change makes the browser safely ignore the message instead.\nThis is sufficient to fix the fiddle in the linked bug since BigBuffer\nwill fall back to inlined bytes. (We will still address this particular\ncause of FD exhaustion separately, but this change makes the more\ngeneral case of FD exhaustion in the browser process a bit more graceful\non Linux.)\n\nA dead method named SendRendererReply is also removed.\n\nBug: 342779913\nChange-Id: I31b9b2f5881e78f6e27eb8c03ddb01f66eb16be5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279570\nReviewed-by: Evan Stade \u003cevanstade@microsoft.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Evan Stade \u003cevanstade@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#1684965}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c02305a001e341e30ec7369814b5b42d1b8b0734\n" }, { "commit": "0ade30bbce54465be41afe333c50746ac8999823", "tree": "feab123374f4cc73c0c237f746c1533f0ca4a7f7", "parents": [ "6ed445ed312f107f73ce6ae28d69ef6ff024e88e" ], "author": { "name": "Avi Drissman", "email": "avi@chromium.org", "time": "Mon Aug 24 20:22:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 20:27:48 2026" }, "message": "Fuchsia: cap available disk space\n\nOn some filesystems like memfs, there is no real meaning for capacity\nand a value of INT64_MAX is returned. Because ByteSize checks for\noverflow, returning that value is dangerous.\n\nIn those cases, cap the value returned.\n\nBug: b/293966900\nChange-Id: I5e0d07764a967e74a1ef35a7e61a94cc6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8275936\nAuto-Submit: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Zijie He \u003czijiehe@google.com\u003e\nCommit-Queue: Avi Drissman \u003cavi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684958}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e4b60bedc0c0478a82b708450d8eb8d3bc6faa5f\n" }, { "commit": "6ed445ed312f107f73ce6ae28d69ef6ff024e88e", "tree": "823ea41e67aae0fa749e39f7b2e4e101721d9dc5", "parents": [ "6dccf9578a068cc0c5b90207b9dd5d30db0da730" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Mon Aug 24 20:08:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 20:15:48 2026" }, "message": "Migrate fuchsia_web to use the new ICU locale setter\n\nTo make the code more convenient,\nFuchsiaIntlProfileWatcher::GetPrimaryLocaleIdFromProfile is being\nmigrated to return LanguageTag. The default is being set to \u0027en-US\u0027 as\nbefore this, an empty string would be returned, but since that empty\nstring was only used to set the default ICU locale with the function\ndefined in base/1i8n/rtl.h, which eventually would use \u0027en-US\u0027 as the\ndefault locale if an empty or invalid string locale was passed to it.\n\nBesides that, the rest of the code in this change is just changing the\nfunction calls to the one in //base/i18n/icubridge/default_icu_locale.h\n\nChange-Id: Ic0817153a106b175c88bbaa6b50227c52e283ca2\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8266005\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nReviewed-by: David Song \u003cwintermelons@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1684944}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8d9e4e14016b40c2ca96a9f683891fc88ed04531\n" }, { "commit": "6dccf9578a068cc0c5b90207b9dd5d30db0da730", "tree": "72e9aafc10ee7b8dbef9b586bb0fcaf7555f3d40", "parents": [ "c2e078f20110554cd7de4a8fb7d38398c46b1d23" ], "author": { "name": "Andrew Grieve", "email": "agrieve@chromium.org", "time": "Mon Aug 24 19:13:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 19:20:03 2026" }, "message": "Android: Make use of new JNI Zero array APIs from jni_array.cc\n\nChange-Id: Ie49a93715eaaeb66f95bfd86a41b75bf52975e13\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8277651\nAuto-Submit: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Martin Kong \u003cmartinkong@google.com\u003e\nReviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1684906}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9d34da21d798da7a314eae6ed8cfe06d13493bfe\n" }, { "commit": "c2e078f20110554cd7de4a8fb7d38398c46b1d23", "tree": "7456881999d5587a9557b243239dd9d15ed741e8", "parents": [ "5860401339f270d21b55db2eaf896fa2ff6445f3" ], "author": { "name": "Elly", "email": "ellyjones@chromium.org", "time": "Mon Aug 24 18:47:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 18:54:52 2026" }, "message": "base/trace_event: use SHA256 for memory dump GUIDs\n\nInstead of SHA1. Since //base can\u0027t depend on //crypto, this uses\nthe BoringSSL SHA256 API directly.\n\nBug: 430344933\nChange-Id: I21723a60b8bbfb76e3960dda7d88f1be0e7126b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8259782\nAuto-Submit: Elly \u003cellyjones@chromium.org\u003e\nReviewed-by: Siddhartha S \u003cssid@chromium.org\u003e\nCommit-Queue: Elly \u003cellyjones@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684881}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7e6f882ffa860d16223e171690d5d9f825d79c47\n" }, { "commit": "5860401339f270d21b55db2eaf896fa2ff6445f3", "tree": "b67344ca54f5b4f81fa131694ded000e9566a393", "parents": [ "5b3aee433f594be205e5fa3310ac6b39cbcbcfd1" ], "author": { "name": "Sky Malice", "email": "skym@chromium.org", "time": "Mon Aug 24 16:20:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 16:24:56 2026" }, "message": "[Clean] Remove redundant semicolons in base/\n\nRemove redundant semicolons after declarations in base/.\n\nTAG\u003dagy\nCONV\u003dfc7d7030-8724-4460-9538-057cc9504db5\n\nBug: 550418935\nChange-Id: I098cd22b9556fa630b858cd85eddd89c7e37a521\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8281984\nCommit-Queue: Sky Malice \u003cskym@chromium.org\u003e\nReviewed-by: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684801}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 706e4ba5282de5a48b8c6037f45e870190ca1efe\n" }, { "commit": "5b3aee433f594be205e5fa3310ac6b39cbcbcfd1", "tree": "ac5aca08bb85a41f69e9a4dc41bf5b4e24dff0ba", "parents": [ "9bf425440cf6878793d5d02f2f8fa0b76b20407e" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Mon Aug 24 15:34:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 15:39:55 2026" }, "message": "[PA] Add support for operator new(std::align_val_t, std::nothrow)\n\nPartitionAlloc previously routed operator new with alignment and\nstd::nothrow to ShimCppAlignedNew, which invoked alloc_aligned_function\nand entered the new handler loop on OOM rather than returning nullptr.\n\nThis adds alloc_aligned_unchecked_function to AllocatorDispatch and\nroutes nothrow aligned new calls to ShimCppAlignedNewNoThrow, returning\nnullptr on allocation failure. It also ensures AlignedAlloc handles\nexcessive allocation sizes gracefully on 32-bit platforms.\n\nFixed: 507484971\nChange-Id: I24b89326e6435c2491a9235d97f37476ce1e9e3b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8265210\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684779}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1f31d1914426758a4625585a419ce0064aece98d\n" }, { "commit": "9bf425440cf6878793d5d02f2f8fa0b76b20407e", "tree": "440726901555dc96f55a30110e9f5d69604e7072", "parents": [ "0704bfb53561a105815c15c8cb485334ea49dd70" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Aug 24 13:00:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 13:06:42 2026" }, "message": "PA: Directly call `GetRawSize()`\n\nIn `PartitionPurgeSlotSpan()`, we can call `GetRawSize()` rather than\n`GetUtilizedSlotSize()`, conditioned on the slot span having the raw\nsize available.\n\nChange-Id: I54e73cc52390f3a953ddcc72468a72640e72fbd4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8277509\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684709}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d49a3af581d7f4107fb13b5d97d188f8df4156a2\n" }, { "commit": "0704bfb53561a105815c15c8cb485334ea49dd70", "tree": "f1a265695177d301c9f415a7866d6c14b887c713", "parents": [ "af3ad26c134a23b27b997907ac39ff270df2d804" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Aug 24 08:23:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 08:29:07 2026" }, "message": "PA: Include buildflags header\n\nIWYU per the style guide. `PA_BUILDFLAG()` requires\n`partition_alloc/buildflags.h`.\n\nChange-Id: I11d1fbb519105166d93697e7c3e2d977eda84079\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276949\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684629}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b74f446be6bc7003ba70df4fc48f703dcf0b51cf\n" }, { "commit": "af3ad26c134a23b27b997907ac39ff270df2d804", "tree": "3a3f22af84284af09e126f8f822bc92d5f025d61", "parents": [ "2c53b4afcec741b009e6c727f2cefcbdc914f3aa" ], "author": { "name": "iknoom", "email": "moonki1107@gmail.com", "time": "Sat Aug 22 03:07:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Aug 22 03:13:42 2026" }, "message": "Use span::copy_from() for TaskTrace address copying\n\nUse span::copy_from() to copy addresses between spans in\nTaskTrace::GetAddresses(), replacing std::ranges::copy_n().\n\nBug: None\nChange-Id: I05ee60a8c8bcde659861fa3a938fd2d084eae18b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8259828\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684452}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e7522ba66cdeb4b4b3077635e14c9102f6569ec1\n" }, { "commit": "2c53b4afcec741b009e6c727f2cefcbdc914f3aa", "tree": "d0570c3be0f69f14690c80aef8b2cdfa5a307070", "parents": [ "5e2b185606a84f9b115d183397388b212e3233ee" ], "author": { "name": "seannli", "email": "seannli@google.com", "time": "Sat Aug 22 03:03:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Aug 22 03:09:40 2026" }, "message": "media: Use screen off to trigger WebRTC suspend\n\nOn Android desktop devices, closing the lid triggers a system suspend.\nHowever, Android currently lacks a dedicated API for apps to observe\nlid close or system suspend events.\n\nTo work around this, this CL exposes ScreenStateReceiver to C++ and\nuses the ACTION_SCREEN_OFF broadcast as a proxy to trigger\nPeerConnectionTrackerHost::OnSuspend(). This ensures that WebRTC\nproperly closes its peer connections before the device goes to sleep.\n\nThis behavior is guarded by the kAndroidSuspendWebRtcOnScreenOff\nfeature flag and is enabled by default on Android desktop devices.\n\nBug: 533876870\nTest: Verified on Android desktop device\nChange-Id: I66af32793b5a3dcb6c67a2c41f8e7c4bc50f2219\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8260535\nReviewed-by: Yaron Friedman \u003cyfriedman@chromium.org\u003e\nReviewed-by: Mark Foltz \u003cmfoltz@chromium.org\u003e\nCommit-Queue: Sean Li \u003cseannli@google.com\u003e\nReviewed-by: Guido Urdaneta \u003cguidou@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684450}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c933ace92a97d7daa622af4c2cecbf15822b2c0f\n" }, { "commit": "5e2b185606a84f9b115d183397388b212e3233ee", "tree": "6891aed2aae2aadf35b3b391a3f8402725a9db21", "parents": [ "d1b642c96d2813233365bc1a39024354da4ea858" ], "author": { "name": "Richard Townsend", "email": "ritownsend@google.com", "time": "Fri Aug 21 21:13:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 21:18:14 2026" }, "message": "tests: tear down TaskEnvironment after ScopedFeatureList [base]\n\nThreads created by TaskEnvironment can access ScopedFeatureList during\nstartup. Therefore, the global ScopedFeatureList must outlive any\nthreads created by TaskEnvironment, otherwise we can get segmentation\nfaults and general test flakiness.\n\nBug: 487287578, 359904334\nChange-Id: I2ed2466370bd62d253c444947995cecf20f8d79c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8258563\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Richard Townsend \u003critownsend@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1684214}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ed915160d92fb5e9124806655936a6d4822f16f3\n" }, { "commit": "d1b642c96d2813233365bc1a39024354da4ea858", "tree": "11898b13640b9a229cf73c58ab2ff44e9bedbc09", "parents": [ "a17fa4ca30049aab2fbaf17487a312f9771de8e9" ], "author": { "name": "Andrew Grieve", "email": "agrieve@chromium.org", "time": "Fri Aug 21 20:29:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 20:36:02 2026" }, "message": "JNI Zero: Enhancements to array wrappers\n\n* Make ArrayViewCritical movable\n* Make ArrayViewCritical support both signed and unsigned types\n* Make JavaRef::Size() return a size_t of GetLength()\n\nUpdates some usages of these throughout the codebase.\n\nChange-Id: I343438e4ed26000ecf59f36da72e83a9b1ae003a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8271346\nReviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nOwners-Override: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684174}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 55adf20e5753fc93dbb0e598a501154ed5930943\n" }, { "commit": "a17fa4ca30049aab2fbaf17487a312f9771de8e9", "tree": "b21790d3ced28c102b01e18833c3db4410217b06", "parents": [ "67756b2d90da25c307c9f7d35c841cdf3c4b983b" ], "author": { "name": "Alexei Svitkine", "email": "asvitkine@chromium.org", "time": "Fri Aug 21 16:24:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 16:29:30 2026" }, "message": "Pass group name by string view to AppendGroup()\n\nUpdate FieldTrial::AppendGroup() and FieldTrial::SetGroupChoice() to\ntake std::string_view instead of const std::string\u0026.\nUpdate SetUpSeedFileTrial() helper in components/variations to also\ntake std::string_view, and update its callers to avoid converting\nstd::string_view to std::string.\n\nTAG\u003dagy\nCONV\u003d7d8103f7-5467-451d-aa91-4fba7c646705\n\nChange-Id: Ib98e34c4632c0e3ce5fcb42f7567e0ce5b6c4632\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8275330\nCommit-Queue: Luc Nguyen \u003clucnguyen@google.com\u003e\nCommit-Queue: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nAuto-Submit: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nReviewed-by: Luc Nguyen \u003clucnguyen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683975}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 910cc713a16f31e02f6a3e395479e77b8eada61d\n" }, { "commit": "67756b2d90da25c307c9f7d35c841cdf3c4b983b", "tree": "2553f5ef0be855cbc7ba22aa6c184b0a0704d4c4", "parents": [ "d5f8abd5ddbee4dcbe41ca49accd18d7ffb0eefc" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Aug 21 16:01:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 16:06:53 2026" }, "message": "Remove UNSAFE_TODO from partition_alloc/scheduler_loop_quarantine_support.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ideb834e06b6b8ed5ac6d9e35e04c2fcadab1114b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834102\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683937}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6a031af089b9692f4e616d81ba42b1e1d408fd67\n" }, { "commit": "d5f8abd5ddbee4dcbe41ca49accd18d7ffb0eefc", "tree": "0457366e297b325dd0f5e7edb2029e0abb46278a", "parents": [ "3dcd595719b62ddb646f005fb561cfd93ca72e7a" ], "author": { "name": "Andrew Grieve", "email": "agrieve@chromium.org", "time": "Fri Aug 21 14:53:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 14:57:57 2026" }, "message": "Reland \"Android: Harden Java OOM handling in crash reporting\"\n\nThis reverts commit c6708b06c46ec6fe6bdfc1383555b829dc985ec7.\n\nReason for reland: JNI Zero fixed in https://crrev.com/c/8258104\n\nOriginal change\u0027s description:\n\u003e Revert \"Android: Harden Java OOM handling in crash reporting\"\n\u003e\n\u003e This reverts commit 89fab75215398f946c0d2921c03b86568fe51336.\n\u003e\n\u003e Reason for revert: b/549588993 This change references private accessors (`org_chromium_base_JniAndroid_clazz`) instead of generated wrappers (`Java_JniAndroid_\u003cmethod\u003e`). This broke Cronet\u0027s import into Android which uses `--package_prefix`, which results in private accessor being different. If a `Java_JniAndroid_\u003cmethod\u003e` wrapper was used, this wouldn\u0027t have broken.\n\u003e\n\u003e Failure Link: ag/41639081\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e Android: Harden Java OOM handling in crash reporting\n\u003e \u003e\n\u003e \u003e Was seeing a crash likely due to OOM when resolving JniAndroid\u0027s jclass.\n\u003e \u003e Cache it ahead of time to mitigate this.\n\u003e \u003e\n\u003e \u003e Bug: 548733126\n\u003e \u003e Change-Id: If0e8d76e63af91b5cc10345a792ad40bfb36bc7e\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254895\n\u003e \u003e Reviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\n\u003e \u003e Commit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e \u003e Commit-Queue: Martin Kong \u003cmartinkong@google.com\u003e\n\u003e \u003e Auto-Submit: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1682708}\n\u003e\n\u003e Bug: 548733126\n\u003e Change-Id: Ifcf487bf64b801cc8fb4f644a2d46ebf3d25e65a\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8250908\n\u003e Bot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Reviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\n\u003e Reviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Reviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\n\u003e Commit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1683155}\n\nBug: 548733126\nChange-Id: I0622d2aa37aa38030824184b2500da068a10e5a5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8272102\nCommit-Queue: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nAuto-Submit: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683906}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f2b98e666f3ee99a6171e3de18c6d48b8abec53a\n" }, { "commit": "3dcd595719b62ddb646f005fb561cfd93ca72e7a", "tree": "fd5e08307261d80cc9d9ca16d2bb27f4cc91f20a", "parents": [ "4b81fe31d052cdadb99a8f66af3b454775c1e25c" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Aug 21 14:21:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 14:27:31 2026" }, "message": "remove UNSAFE_TODOs from partition_alloc/partition_root.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I839fd0af91a0ba601ccf13d4a3b206f274afa0e4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833803\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683884}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2ab8c8090931ee114af1bac6ac3f4804a3f0b6e4\n" }, { "commit": "4b81fe31d052cdadb99a8f66af3b454775c1e25c", "tree": "bf25233707d9a6e95796fb328f8c7571c5e652cb", "parents": [ "7c976bf8ec5c8c67e08893db99babb2f204c11d4" ], "author": { "name": "Gabriel Charette", "email": "gab@chromium.org", "time": "Fri Aug 21 09:46:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 09:50:46 2026" }, "message": "Cleanup PageAllocatorRetryOnCommitFailure feature flag\n\nThis feature has launched and enables PartitionAlloc retry on commit\nfailure for the browser process on Windows. This CL removes the feature\nflag and makes the retry behavior permanent.\n\nFixed: 40880528\nb:483482004\n\nChange-Id: I11f23f9c980a87c219f7482d76cb28dd9cfc06d8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257597\nAuto-Submit: Gabriel Charette \u003cgab@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683778}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0b6e2c42e2e17e87bfe96ba216530165093dc0fa\n" }, { "commit": "7c976bf8ec5c8c67e08893db99babb2f204c11d4", "tree": "3ea05deb9859cacba2f7d4f13fb1e6b27cf38423", "parents": [ "10235ae7f0c5e35ea0c4f2d5bf70f2ae544886c0" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 21 07:25:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 07:34:36 2026" }, "message": "[PA] Switch AllocToken ABI from Fast ABI to non-Fast ABI\n\nCurrently, AllocToken uses Fast ABI, which embeds the token ID directly\ninto the allocation function names (e.g., `__alloc_token_0_malloc`).\nThis approach is efficient while the number of AllocTokens is small\n(currently fixed at 2).\n\nHowever, in upcoming work, we plan to scale the number of AllocTokens up\nto 2^32 - 1 to leverage AllocToken for smart sampling (e.g.,\nGWP-ASan) and for zapped memory to enhance post-crash debuggability. When scaling up the number of AllocTokens, embedding IDs into function\nnames would lead to severe binary size expansion. Passing the ID as a\nfunction argument (non-Fast ABI) is more scalable.\n\nThis CL switches the AllocToken ABI from Fast ABI to non-Fast ABI by\nupdating the build flags, symbol entry points, and linker map\nconfigurations.\n\nChange-Id: Ie72d8bd8aa2fbed4b67b3846b4d92cc461e5b895\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257195\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683729}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4cbbbd07dd4a48518181e3ea640cb63a3fc7518c\n" }, { "commit": "10235ae7f0c5e35ea0c4f2d5bf70f2ae544886c0", "tree": "1ee943ebe924852d0c4d5a0f7ac3ff8c4f269171", "parents": [ "bf53fcc225352e7e8073efcde323faf3e0dd5f31" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Fri Aug 21 07:16:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 07:21:22 2026" }, "message": "[PA] Zap intended leaks even without a type id hint\n\nIn FreeNoHooksImmediateInternal, hoist the zap logic out of the\nkWithTypeIdHint branch so that Free\u003ckIntendedLeak\u003e sanitizes the\npayload even when no type ID hint is passed by using\nkIntendedLeakUnknownTypeId.\n\nThis is necessary for RuntimeTargetedHardening where deallocations happen\nthrough ordinary free() without a known type ID hint at the free site,\nensuring retired slots are sanitized rather than left readable by\ndangling references. Existing callers (AMSC) always pass a hint and\nremain bit-identical in behavior.\n\nBug: 546295511\nChange-Id: Ib2b5769998fddb729ae04aec99e842ef7304fc44\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256689\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683725}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5e3372305c54756cb103ad016ba4ba9378446508\n" }, { "commit": "bf53fcc225352e7e8073efcde323faf3e0dd5f31", "tree": "452f3f47c358b056e471fd72f3109dcdd4a32ade", "parents": [ "2280ca62c295ca87abe22a4b5dca6e14fc0ab05e" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Aug 21 01:45:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 01:52:00 2026" }, "message": "Refactor `immediate_crash_unittest` [squash]\n\nSpanify remaining helper functions in `immediate_crash_unittest`, fully\nswitching off of repeatedly reassigning a `std::optional\u003cstd::vector\u003e`.\n\nFixed: 543499051\nChange-Id: I39a507a03473e3518bbf17882f6a7c2ed9acf59a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8220675\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683612}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 37121f44c7b358dd1acfa57f49ecab3e97d1f0b5\n" }, { "commit": "2280ca62c295ca87abe22a4b5dca6e14fc0ab05e", "tree": "72f0ab637d0d604b2c798856b3e8d17964384d5f", "parents": [ "6ff8c23463c5574f4e1871e9065e2b7ed033b0ce" ], "author": { "name": "Anand Ravi", "email": "anandrv@google.com", "time": "Thu Aug 20 23:56:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 00:01:26 2026" }, "message": "[base] Restrict use of MetricsSubSampler\n\nThis change restricts direct access to MetricsSubSampler by making its\nconstructor, destructor, and methods private. Clients should prefer\nShouldRecordSubsampledMetric() instead of creating an instance of the\nsub-sampler directly.\n\nBug: 500105151\nChange-Id: I4526c2741fd8746df63e0cbde793b9dc0142c385\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8270650\nReviewed-by: Ken Buchanan \u003ckenrb@chromium.org\u003e\nCommit-Queue: Anand Ravi \u003canandrv@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683557}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a1d64d686fecee64a4c02900b25cceb58c387731\n" }, { "commit": "6ff8c23463c5574f4e1871e9065e2b7ed033b0ce", "tree": "c03d25a6e9ceeb4f59d7400d2d8da3f97fda0545", "parents": [ "d9edcb087ce8405a47759d8680e4343d22b7f737" ], "author": { "name": "Alexei Svitkine", "email": "asvitkine@chromium.org", "time": "Thu Aug 20 21:32:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 21:37:32 2026" }, "message": "Add a crash key for MismatchedHistogramArgs.\n\nThis allows inspecting the value without having to start a debugger\nsession, which is needed with the previous DEBUG_ALIAS_FOR_CSTR\ninstrumentation.\n\nNow that this is being hit less, take the performance hit of the string\ncopy to better diagnose the remaining call sites.\n\nBug: 542413274\nChange-Id: Ib9f0a57132f92bcc0b8da04e329e235f9d39a814\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8273929\nReviewed-by: Luc Nguyen \u003clucnguyen@google.com\u003e\nCommit-Queue: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nAuto-Submit: Alexei Svitkine \u003casvitkine@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683460}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 97e75e1f996b6befa1d0f3bfcb8a527673b3bb72\n" }, { "commit": "d9edcb087ce8405a47759d8680e4343d22b7f737", "tree": "a2ab62ecca8ca61a18dfbc3c09a87944fb20312a", "parents": [ "4ad6a171e6f987ed8f194061dce2bbb0663a8403" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Thu Aug 20 21:08:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 21:14:33 2026" }, "message": "Migrate blink locale controller to use the new ICU locale setter\n\nChange-Id: Ife727742adcc0f1f5ea087397e90ef234db782bf\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8266045\nReviewed-by: Andrey Kosyakov \u003ccaseq@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683449}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 43b6f1fc1850f46d07c8b5a0e2ee6482f44d6e52\n" }, { "commit": "4ad6a171e6f987ed8f194061dce2bbb0663a8403", "tree": "1c9e02806e9ad764873e3b08fc89c65a40c0c1e4", "parents": [ "22936505a878db39647143e9da637603d484a071" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Thu Aug 20 20:48:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 20:53:19 2026" }, "message": "Make flat_map [] operator and at methods constexpr\n\nTo be able to do that, flat_tree\u0027s iterator methods had all do be made\nconstexpr.\n\nOther methods, such as insert_or_asign or try_emplace could also be\neasily made constexpr, but for the sake of leaving the change small,\nthey are not part of the change.\n\nChange-Id: I8cc4bc776aa4b1991d4c7d0a577f0ce36c32a066\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8270651\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683427}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: df5f005ecd589b26b87ba419c39cc1605591442a\n" }, { "commit": "22936505a878db39647143e9da637603d484a071", "tree": "278c4c49a6e30705c8b6f6b4de01eba2863cb384", "parents": [ "3a66e6118ab14d171b9f0ebb11e673e5e132f4df" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 20:27:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 20:31:41 2026" }, "message": "Spanification of shim/allocator_shim_default_dispatch_to_partition_alloc.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I2d96621a653fd4e7ce0e78713e2b065b193c6808\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834107\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683393}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 54efe34a91f379fd1c85a676f69aaf26545ad717\n" }, { "commit": "3a66e6118ab14d171b9f0ebb11e673e5e132f4df", "tree": "ddd56be19ea3b472715ac65cb2ea826c154c926a", "parents": [ "c738d181a280bdbf899ac3e70d84998086863a19" ], "author": { "name": "Rob Pitkin", "email": "robpitkin@google.com", "time": "Thu Aug 20 20:05:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 20:09:42 2026" }, "message": "hid: Implement WebHID Service and Device Enumeration\n\nThis introduces device::HidServiceAndroid as the implementation of\ndevice::HidService on Android, connecting it to the Android OS hardware\nHID framework (android.hardware.hid.HidManager) with eager device\nenumeration during construction.\n\nAdditionally, this enables compilation and execution of\nhid_service_unittest.cc on Android.\n\nKey implementation details:\n- Guards WebHID on Android behind the base::Feature kWebHidOnAndroid\n (disabled by default) and exposes a \"web-hid-on-android\" toggle in\n chrome://flags. When disabled, both content::HidService::Create and\n device::HidService::Create return early without creating service\n instances or binding Mojo interfaces.\n- Instantiates ChromeHidService inside the HidServiceAndroid constructor\n via Java_ChromeHidService_create and holds a global JNI reference.\n- Enumerates devices asynchronously on a background Java executor thread\n to prevent blocking the browser main thread (which throws\n IllegalStateException).\n- Guards the scan with canEnumerateDevices() and exception handling for\n SecurityException to fail gracefully if permission is denied.\n- Extracts unique IDs, vendor/product IDs, product names, transport\n types (USB vs Bluetooth), and raw report descriptors in Java and\n delivers them via JNI.\n- In C++, bounces background JNI callbacks (OnDeviceAdded,\n OnEnumerationComplete) to the creation sequence task runner before\n processing them, ensuring sequence safety.\n- Parses raw report descriptors in C++ to build HidDeviceInfo objects\n and populates the internal device map.\n\nBug: 514445546\nChange-Id: I065a0a44799e7c53f91e9fa4ace395547f3c67b0\nIntent-to-Prototype: https://groups.google.com/a/chromium.org/d/msgid/blink-dev/CAGhmGSMSvLAQs-bCNEAuugASEHyRApuG%2B0ob3r%2Bo53GOz%2Bh0fQ%40mail.gmail.com\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8032624\nReviewed-by: Elias Klim \u003celklm@chromium.org\u003e\nReviewed-by: Will Harris \u003cwfh@chromium.org\u003e\nReviewed-by: Peter Conn \u003cpeconn@chromium.org\u003e\nCommit-Queue: Rob Pitkin \u003crobpitkin@chromium.org\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683358}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4bd0c08b32189a209411383eef40b47d4ff0abc0\n" }, { "commit": "c738d181a280bdbf899ac3e70d84998086863a19", "tree": "505057b43e32a9110dc4195392c24ab2a6ae5328", "parents": [ "d1b92ba496697b63f679f4fcbf26a5b4174a1916" ], "author": { "name": "Daniel Cheng", "email": "dcheng@chromium.org", "time": "Thu Aug 20 18:20:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 18:25:28 2026" }, "message": "Remove //base/big_endian.h\n\nBigEndianReader and BigEndianWriter were removed and usage replaced with\n`base::SpanReader`, `base::SpanWriter`, and the functions in\n//base/numerics/byte_conversions.h.\n\nThe removal of //base/big_endian.h was deferred to avoid potential IWYU\nissues; this CL removes the header altogether and updates all files that\nincluded it, adding includes to satisfy IWYU if needed.\n\nAlso rename the perf test to byte_conversions_perftest.cc, since it\nbenchmarks byte_conversions.h now.\n\nBypass-Check-License: base/byte_conversions_perftest.cc is renamed\nChange-Id: I4f70807773cfdf9478988540f55226934be7e02f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8268921\nOwners-Override: Lei Zhang \u003cthestig@chromium.org\u003e\nAuto-Submit: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683291}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bdff139c4b644e009f6b4909b67480b5e249d202\n" }, { "commit": "d1b92ba496697b63f679f4fcbf26a5b4174a1916", "tree": "f31ecbc7f64634173c9940d87a9dd403beacf88d", "parents": [ "3783e4c2b45515f340681627752db6400b9a7992" ], "author": { "name": "Noam Helfman", "email": "noamh@microsoft.com", "time": "Thu Aug 20 17:47:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 17:52:37 2026" }, "message": "[cc/metrics] Make the ScrollUpdates scroll ID non-optional\n\n`ScrollUpdates::scroll_begin_arrival_timestamp_` was declared\n`std::optional\u003cbase::TimeTicks\u003e` with a `std::nullopt` default so that\nthe CL adding it did not have to update every call site. That optional\nis redundant: the value comes from\n`ScrollEventMetrics::scroll_begin_arrival_timestamp()`, a plain\n`base::TimeTicks` which is already null until the first scroll begin is\nseen.\n\nStore and return a plain `base::TimeTicks` and require the constructor\nparameter. Tests which do not care about the scroll ID pass an arbitrary\n`kScrollId`. `ScrollJankV4TracingRecorder` now emits\n`scroll_begin_arrival_us` unconditionally, like the other recorders of\nthis timestamp.\n\nChange-Id: I93676259654453fc4d12dd4b94ecc20035fa4a22\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8252266\nReviewed-by: Stacy Gaikovaia \u003cgaiko@google.com\u003e\nReviewed-by: Petr Cermak \u003cpetrcermak@chromium.org\u003e\nCommit-Queue: Noam Helfman \u003cnoamh@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683269}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d1c37de3014dd36218e0ee882739c9140db94a1d\n" }, { "commit": "3783e4c2b45515f340681627752db6400b9a7992", "tree": "3e92de8f68b283b6773f5eb18177641604f92fe8", "parents": [ "a0a636095f882f1286595d94ff90b1adad035032" ], "author": { "name": "Vladyslav Kasprov", "email": "vkasprov@google.com", "time": "Thu Aug 20 14:58:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 15:03:09 2026" }, "message": "Revert \"Android: Harden Java OOM handling in crash reporting\"\n\nThis reverts commit 89fab75215398f946c0d2921c03b86568fe51336.\n\nReason for revert: b/549588993 This change references private accessors (`org_chromium_base_JniAndroid_clazz`) instead of generated wrappers (`Java_JniAndroid_\u003cmethod\u003e`). This broke Cronet\u0027s import into Android which uses `--package_prefix`, which results in private accessor being different. If a `Java_JniAndroid_\u003cmethod\u003e` wrapper was used, this wouldn\u0027t have broken.\n\nFailure Link: ag/41639081\n\nOriginal change\u0027s description:\n\u003e Android: Harden Java OOM handling in crash reporting\n\u003e\n\u003e Was seeing a crash likely due to OOM when resolving JniAndroid\u0027s jclass.\n\u003e Cache it ahead of time to mitigate this.\n\u003e\n\u003e Bug: 548733126\n\u003e Change-Id: If0e8d76e63af91b5cc10345a792ad40bfb36bc7e\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254895\n\u003e Reviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\n\u003e Commit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Commit-Queue: Martin Kong \u003cmartinkong@google.com\u003e\n\u003e Auto-Submit: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1682708}\n\nBug: 548733126\nChange-Id: Ifcf487bf64b801cc8fb4f644a2d46ebf3d25e65a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8250908\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nReviewed-by: Stefano Duo \u003cstefanoduo@google.com\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683155}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c6708b06c46ec6fe6bdfc1383555b829dc985ec7\n" }, { "commit": "a0a636095f882f1286595d94ff90b1adad035032", "tree": "2df2b91257b74d5950eed85589d3fdf76170f795", "parents": [ "4296d825c8af430270900049a38f37d31fecbdb2" ], "author": { "name": "Fiona Verzivolli", "email": "fionav@google.com", "time": "Thu Aug 20 14:18:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 14:23:19 2026" }, "message": "Introduce TaggedMetricLock for Lock tagging\n\nIntroduce `TaggedMetricLock` and `TaggedAutoLock` to allow associating\nlocks with specific metric tags (core and custom). This allows more\nspecific tracking of lock contention.\n\nTo enforce correct usage, `TaggedMetricLock` must be acquired using\n`TaggedAutoLock`. Attempting to pass a `TaggedMetricLock` to a standard\n`base::AutoLock`, or a standard `base::Lock` to a `TaggedAutoLock`, will\nresult in a compile-time error. This type-safety ensures that metric\ntags are reliably captured and prevents accidental mixing of tagged and\nuntagged primitives.\n\nTests are added for `TaggedMetricLock` to verify the API contract and\nserve as a regression safety net in case implementation details change.\n\nBinary-Size: Size increase is unavoidable, see CL 8167183\nBug: 518786382\nChange-Id: I3ffe31599e99530aed637ec540854c5f99678904\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8183729\nReviewed-by: Anand Ravi \u003canandrv@google.com\u003e\nCommit-Queue: Anand Ravi \u003canandrv@google.com\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683125}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: aa7e404847b5f35a1dc240024a8f652011ebafab\n" }, { "commit": "4296d825c8af430270900049a38f37d31fecbdb2", "tree": "9afd2cc3a35b2031e133427c59fd77b95147b5ed", "parents": [ "cb56abc1cdfb0a839351a3be1d3bf220bef10660" ], "author": { "name": "Gazal", "email": "agazal@google.com", "time": "Thu Aug 20 13:57:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 14:01:36 2026" }, "message": "[Code Health] Replace null suppliers with SupplierUtils.ofNull()\n\nReplace ad-hoc generic Supplier lambdas returning null with the shared\nSupplierUtils.ofNull() constant across test files.\n\nReusing the framework utility improves code consistency and readability\nby avoiding arbitrary lambda expressions when a null supplier is needed.\n\nBug: 541671762\nChange-Id: Idde1900733f9a6b35d7e1151ebd51d8abf4a2e61\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8267598\nReviewed-by: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nCommit-Queue: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nAuto-Submit: Gazal Agarwal \u003cagazal@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683104}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 230b02eb45cea79f1f28f4b756d5e264f718c19f\n" }, { "commit": "cb56abc1cdfb0a839351a3be1d3bf220bef10660", "tree": "ac64b3abaca2dea4613e5c8c7ab20b9d0c0609d0", "parents": [ "a7d83ae11b7006762d09a438944d018f2ce3dc22" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 11:51:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 11:57:00 2026" }, "message": "Spanification of partition_alloc/thread_cache_unittest.cc\n\nThis is the result of running the automatic spanification on linux\nand updating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I199570689a9bedee4d0a0e5b2a7abf968c5758c3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834103\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683044}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e3a262268c5a63cdff4ef7ec2ba8a3adcfe067fe\n" }, { "commit": "a7d83ae11b7006762d09a438944d018f2ce3dc22", "tree": "3525e7ed9333b2a1e66cc88088ca2339f5fff34e", "parents": [ "a2890140a9daeccc26b86b9f54332d4db988a74d" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 11:38:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 11:42:50 2026" }, "message": "Spanification of partition_alloc/thread_cache.cc etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I035fd45f9bf187840df957823ef8658d0ed1f45e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833827\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683038}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dec4fbcb823940c41e44ae993d2cd69ec44246c8\n" }, { "commit": "a2890140a9daeccc26b86b9f54332d4db988a74d", "tree": "d970b1ee657269cc0bc2305934645f95ae01be7c", "parents": [ "9491df7903aaf00647a7b13762a25412f743dd56" ], "author": { "name": "Shelley Vohr", "email": "shelley.vohr@gmail.com", "time": "Thu Aug 20 09:48:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 09:54:13 2026" }, "message": "[base] Back shared memory regions with memfd on Linux\n\nPlatformSharedMemoryRegion::Create() on Linux and ChromeOS creates an\nunlinked file in /dev/shm: pick a random name, open(O_CREAT|O_EXCL),\nopen() the path a second time read-only (for a later ConvertToReadOnly),\nunlink(), ftruncate(), fallocate() the whole size, two fstat()s. That is\nseven system calls, a dentry, and - because of the fallocate() - a cost\nproportional to the region size even when most of the region is never\ntouched: a 2 MiB data pipe that carries a 4 KiB response, for example,\nwhich is what the network service creates for every response.\n\nUse memfd_create(2) instead when it is available (Linux 3.17+):\nmemfd_create, ftruncate, F_ADD_SEALS, plus an open of /proc/self/fd/N\nfor the read-only descriptor of writable regions. No fallocate(): memfd\npages live on the kernel-internal shmem mount, which has no size limit\nthat could turn a later page fault into SIGBUS the way a full /dev/shm\ndoes, so there is nothing to reserve against; running out of memory\nwhile faulting a page in is an OOM condition exactly as it is for\nanonymous memory, and for shared memory on macOS and Android today.\nThe /dev/shm implementation stays as the fallback when memfd_create()\nfails, and for the executable case.\n\nSide effects, all intended:\n - Regions are sealed F_SEAL_SHRINK | F_SEAL_GROW | F_SEAL_SEAL, like\n mojo\u0027s channel memfds already are: a process that receives a region\n can no longer ftruncate() it to zero and make every other process\n that maps it take SIGBUS.\n - MFD_NOEXEC_SEAL is used where the kernel supports it (6.3+), so the\n files are created non-executable.\n - Shared memory no longer depends on /dev/shm being present, writable\n or big enough. Container runtimes default to a 64 MiB /dev/shm, which\n is what --disable-dev-shm-usage works around today; the switch keeps\n working but should rarely be needed.\n - In /proc/\u003cpid\u003e/maps the regions show up as\n \"/memfd:shared-memory-region (deleted)\" instead of\n \"/dev/shm/.org.chromium.Chromium.XXXXXX (deleted)\".\n\nSandboxed renderers and utility processes still allocate through the\nmojo broker; its host side (the browser) gets faster. memfd_create with\nthese flags, ftruncate and these seals are already permitted by the\nbaseline seccomp policy, which a follow-up uses to let sandboxed\nprocesses allocate unsafe regions directly.\n\nbase_perftests SharedMemoryRegionPerfTest.* (added here), Linux x64\nofficial build, microseconds per operation, before -\u003e after:\n region create create+map create+map+touch all pages\n unsafe 4KiB 14 -\u003e 4 17 -\u003e 6 18 -\u003e 8\n unsafe 64KiB 21 -\u003e 4 23 -\u003e 9 39 -\u003e 27\n unsafe 1024KiB 119 -\u003e 4 120 -\u003e 6 325 -\u003e 312\n unsafe 8192KiB 817 -\u003e 4 856 -\u003e 7 2696 -\u003e 2705\n writable 4KiB 18 -\u003e 8 20 -\u003e 10 23 -\u003e 12\n writable 64KiB 24 -\u003e 8 28 -\u003e 10 41 -\u003e 31\n writable 1024KiB 125 -\u003e 8 125 -\u003e 10 323 -\u003e 314\n writable 8192KiB 857 -\u003e 8 869 -\u003e 10 2599 -\u003e 2652\n read only 4KiB 20 -\u003e 10 26 -\u003e 13\n read only 64KiB 27 -\u003e 12 44 -\u003e 33\n read only 1024KiB 124 -\u003e 10 323 -\u003e 328\n read only 8192KiB 820 -\u003e 11 2644 -\u003e 2702\nCreation no longer scales with size; creating, mapping and writing every\npage of a region is faster up to 1 MiB and within +/-2% at 8 MiB (page\nallocation moves from fallocate() to first touch).\n\ncontent_shell loading a local page that fetches resources of each size,\nper-request latency, 30 interleaved fresh-process runs per side,\nmedians: fetch() from 127.0.0.1 XHR of a file:// URL\n 1 KiB 1.70 -\u003e 1.29 ms 1.30 -\u003e 0.79 ms\n 16 KiB 1.74 -\u003e 1.25 ms 1.29 -\u003e 0.82 ms\n 64 KiB 1.77 -\u003e 1.38 ms 1.36 -\u003e 0.90 ms\n 256 KiB 1.92 -\u003e 1.47 ms 1.60 -\u003e 1.09 ms\n 1 MiB 2.85 -\u003e 2.60 ms 2.75 -\u003e 2.55 ms\n 4 MiB 5.80 -\u003e 5.82 ms 6.00 -\u003e 6.10 ms\n(network service and FileURLLoader both create a 2 MiB data pipe per\nresponse). BroadcastChannel round trip of a 64 KiB message through the\nbrowser: 0.97 -\u003e 0.87 ms. All rows up to 1 MiB p \u003c 1e-8 and replicate\nin a second session under X11. The 4 MiB rows are +0.02 to +0.10 ms\n(+0.4-1.7%): with a fully used pipe the page allocation that fallocate()\ndid up front now happens on first touch. Loading that page makes the\nbrowser process call memfd_create() 517 times.\n\nTested: base_unittests (new PlatformSharedMemoryRegionTest.\nMemfdRegionsAreSizeSealed / MemfdReadOnlyDescriptor), mojo_unittests, ipc_tests,\nblink_platform_unittests, content_unittests; content_browsertests\n--gtest_filter\u003d*SharedMemory*:*FileURL*:NavigationBrowserTest.*:\n*Loader*:*RenderProcessHost*:*ChildProcess*:*Blob*:*Fetch*:*Canvas*:\n*DiscardableMemory*:*FieldTrial* (no new failures vs. ToT);\nbase_unittests and mojo_unittests under ASan/LSan (no new reports).\nVerified the fallback by running the base shared-memory tests under\nstrace fault injection (-e inject\u003dmemfd_create:error\u003dENOSYS): all pass\nthrough /dev/shm. Verified with strace that a browser session performs\nno /dev/shm opens and no fallocate() calls.\n\nBug: none\nChange-Id: Ic4d2e83ee431a25d71ab052cf2dd448c9e91d3f2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8263816\nReviewed-by: Dominic Farolino \u003cdom@chromium.org\u003e\nCommit-Queue: Shelley Vohr \u003cshelley.vohr@gmail.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682994}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d093ecd65ec0df907411ca19baaee5c206df9e27\n" }, { "commit": "9491df7903aaf00647a7b13762a25412f743dd56", "tree": "0a2817f9052505cd115243f7b9e0da016deda543", "parents": [ "4757aa43c1b5c795688ad4c4907c55dbdb7d049c" ], "author": { "name": "Jan Wilken Dörrie", "email": "jdoerrie@chromium.org", "time": "Thu Aug 20 09:18:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 09:26:48 2026" }, "message": "[base] Generalize byte conversion utilities\n\nRefactor the byte conversion utilities in `base::numerics` to support\ngeneric types, replacing redundant implementations for specific integer\nsizes and signedness.\n\nThis change introduces a `ByteConvertible` concept that enables\nconversion functions like `FromLittleEndian` and `ToBigEndian` to\noperate uniformly on all integral, floating-point, and enumeration\ntypes. The underlying implementations are consolidated into generic\n`FromEndian` and `ToEndian` templates parameterized by `std::endian`.\n\nSpecific improvements include:\n\n- Defining strict concepts (`PackedIntegral`, `IeeeBinaryFloat`, and\n `PackedEnum`) to ensure conversions are only allowed on types without\n padding-bit hazards.\n- Simplifying explicit type helpers (e.g., `U32ToBigEndian`,\n `FloatFromNativeEndian`) to simply forward to the new generic\n implementations.\n- Disabling template argument deduction for encoding functions using\n `std::type_identity_t` to prevent bugs from C++ integer promotion.\n\nChange-Id: I83b88ed7ad39da26be8227fb2c76c9176a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254320\nCommit-Queue: Jan Wilken Dörrie \u003cjdoerrie@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682972}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 20a68dc974ff4a8aab81fb7bc957f001b13680eb\n" }, { "commit": "4757aa43c1b5c795688ad4c4907c55dbdb7d049c", "tree": "fced6be009b8e6ae19b7236fea0dd596f9531bf8", "parents": [ "dc152a2c00db6351cebd037d28dc85fa0f6fc154" ], "author": { "name": "Andrew Grieve", "email": "agrieve@chromium.org", "time": "Wed Aug 19 23:04:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 23:09:27 2026" }, "message": "Android: Harden Java OOM handling in crash reporting\n\nWas seeing a crash likely due to OOM when resolving JniAndroid\u0027s jclass.\nCache it ahead of time to mitigate this.\n\nBug: 548733126\nChange-Id: If0e8d76e63af91b5cc10345a792ad40bfb36bc7e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254895\nReviewed-by: Martin Kong \u003cmartinkong@google.com\u003e\nCommit-Queue: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Martin Kong \u003cmartinkong@google.com\u003e\nAuto-Submit: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682708}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 89fab75215398f946c0d2921c03b86568fe51336\n" }, { "commit": "dc152a2c00db6351cebd037d28dc85fa0f6fc154", "tree": "4c3b15b3f175c2c22c7a699318eca60f369d6bbc", "parents": [ "a4ce60664daa4c587e493014ceea5d5227e187f4" ], "author": { "name": "Gabriel Charette", "email": "gab@chromium.org", "time": "Wed Aug 19 22:26:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 22:32:12 2026" }, "message": "[base] Update TODOs for real-time RunLoop timeouts to bug 40625086\n\nBug 40625086 is the active issue tracking unifying ScopedRunTimeout and\nsupporting real-time timeouts under mock time.\n\nFixed: 40602467\nBug: 40625086\nChange-Id: I909d3d3df93e4d608344d7056ad8b592b2cb6223\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8270266\nAuto-Submit: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682674}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ca10109f74ffcd447d283564b6c1688af34403fe\n" }, { "commit": "a4ce60664daa4c587e493014ceea5d5227e187f4", "tree": "d7ed865fb238eae2b6c074d5bb38f72d36bc9a0e", "parents": [ "be2e64d979119386133da2a6d8d5c1562383bcbe" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Wed Aug 19 19:03:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 19:08:21 2026" }, "message": "Migrate l10n_util to use the new ICU locale setter\n\nChange-Id: I611eac8f6834d980b2727a0dfd274baa775a110a\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8260898\nReviewed-by: Greg Thompson \u003cgrt@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682529}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 39767225994268001a66f9918b76bf148e5149d2\n" }, { "commit": "be2e64d979119386133da2a6d8d5c1562383bcbe", "tree": "7b1667c80f8cf902b5e293fd2767c076add1ad97", "parents": [ "7b75f6b607a0d0dd7eb044da093819b3dbce56f7" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Wed Aug 19 19:02:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 19:07:30 2026" }, "message": "Add IOS crash keys to new ICU locale setter\n\nChange-Id: I1e3f5cc955293b8773e3fe68528f1c3c186c6c6e\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8263955\nReviewed-by: Greg Thompson \u003cgrt@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682528}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bb96aafe11b48dc4ecd43c5877359cd253c23592\n" }, { "commit": "7b75f6b607a0d0dd7eb044da093819b3dbce56f7", "tree": "ab0db1d129d31181e66ed2859bd598dc679892f7", "parents": [ "5a9992d69ddcbda1f5429d20a49103ce59a32783" ], "author": { "name": "Calder Kitagawa", "email": "ckitagawa@chromium.org", "time": "Wed Aug 19 17:27:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 17:31:56 2026" }, "message": "UnownedUserDataHost reuse UiThreadHandler\n\nBug: 546231218\nChange-Id: I77926886d5a98aaccc3fae9aa9a4ed3a9ae177a1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8258158\nCommit-Queue: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nAuto-Submit: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nReviewed-by: Fiaz Muhammad \u003cmfiaz@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682444}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4cbcef94380f206465b169be477a9d643a462f01\n" }, { "commit": "5a9992d69ddcbda1f5429d20a49103ce59a32783", "tree": "5b762d1118670d7a89474b49f8f2061c2b2bf0e2", "parents": [ "1f28a1507afb14ea370d430a90c3a57f8dbcecae" ], "author": { "name": "Henrique Nakashima", "email": "hnakashima@chromium.org", "time": "Wed Aug 19 16:24:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 16:28:24 2026" }, "message": "[Android] Include class name in @BeforeClass / @AfterClass exceptions\n\nInclude the test class name in BeforeClassException and\nAfterClassException messages in BaseJUnit4ClassRunner so LUCI\nAnalysis can generate separate failure clusters for each test class\nrather than lumping all @BeforeClass / @AfterClass failures into\nbroad umbrella clusters.\n\nBug: 528152173, 528271777\nChange-Id: I6227463c2c0c1c30f8655454bfe27fae50c2df9a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8266013\nReviewed-by: Calder Kitagawa \u003cckitagawa@chromium.org\u003e\nCommit-Queue: Henrique Nakashima \u003chnakashima@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682383}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: df9d3f6222f0069bf3978aefea9de853879f202c\n" }, { "commit": "1f28a1507afb14ea370d430a90c3a57f8dbcecae", "tree": "5a8bdc3ccb769f4dede712bb90d01249ed9d92fc", "parents": [ "cc9b37077aecbd9577e7b51dbe8b701e36a326e2" ], "author": { "name": "Danilo Tedeschi", "email": "danft@google.com", "time": "Wed Aug 19 16:23:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 16:27:42 2026" }, "message": "Remove SetRTLForTesting by using ScopedRTLForTesting\n\nThis is part of the LSC to control ICU default locale setting. The first\nstep is going to be removing the usages of SetICUDefaultLocale that has\nno control on who can call it.\n\nMore info about the project can be found here:\nhttps://docs.google.com/document/d/1nQkpibd-w1YJRHLaZxFmk1ztlB6XwV9jlEAJht2v4e8/edit?tab\u003dt.0#heading\u003dh.ylysozd1ht7z\n\nQuick note here is that I had to remove g_icu_text_direction which was a\nsimple cache to avoid computing rtl when called. Since it is only a\nsimple set lookup, it is being removed.\n\nChange-Id: I7a7cb368459822985fe1deb026090c040a8eb189\nBug: 542711615\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8198687\nReviewed-by: Hidehiko Abe \u003chidehiko@chromium.org\u003e\nReviewed-by: David Yeung \u003cdayeung@chromium.org\u003e\nCommit-Queue: Danilo Tedeschi \u003cdanft@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682382}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: fcedb25aeef2b2f314c883db96390c6241d4e320\n" }, { "commit": "cc9b37077aecbd9577e7b51dbe8b701e36a326e2", "tree": "1df7c7b534c4816cf82d6030fcfb9bd07165412d", "parents": [ "5145c513c99db6c42196dd5a6178055114d66abc" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 19 15:56:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 16:01:57 2026" }, "message": "Spanification of partition_alloc/internal/thread_cache_internal.h, etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I2bcbf6217d7fc0d8491f8a19f3746f3828405aa4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7832915\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682358}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a9fa5d69192a8576ddaaa4a6096c4e8c6f12a74f\n" } ], "next": "5145c513c99db6c42196dd5a6178055114d66abc" }