)]}' { "log": [ { "commit": "a0f30e381c6e132215a0c8d809fd08ff4cdad244", "tree": "e2a9bf31c8ad57e000caff74cdb7b1e86d2b884f", "parents": [ "391865cb9a90a8bd7339adce2e1a1031eec0d0ab" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Fri Sep 18 16:21:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 16:27:42 2026" }, "message": "partition_alloc: Remove unused code from partition_alloc_constants.h\n\n- All users of enum class PoolHandleMask are gone.\n- Nobody calls MaxSuperPagesInPool() since they can just access\n `kMaxSuperPagesInPool` directly.\n\nChange-Id: I74c0f16484586d8ea70c1693d1dc71c594bb7d55\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8417503\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1700839}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6ad5d6f91d35a1e8e8a3e3d9b9c5ac67d8608b42\n" }, { "commit": "391865cb9a90a8bd7339adce2e1a1031eec0d0ab", "tree": "78862ba4995655118fe67497d73399cf3a8d0208", "parents": [ "3fe238c9a355c2f872f745e48c649b652afe4348" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Sep 18 06:16:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 06:20:39 2026" }, "message": "Checked Span: Smuggle requested size\n\nThis CL temporarily breaks `SpanTest.CheckedSpanCrashes` when\n`PA_BUILDFLAG(CHECKED_SPAN_HAS_METADATA_SUPPORT)` is set.\n\nWhen build support for using `InSlotMetadata` is enabled, Checked Span\nwill smuggle the caller\u0027s requested size into the last 4 bytes of the\nslot\u0027s usable space. This space is opaquely withheld from the \"external\"\n`GetUsableSize()`.\n\nNote that these changes are confined to PartitionAlloc\u0027s core; to get\nChecked Span to actually use them, we\u0027ll modify `bounds_checks.cc`.\n\nBug: 534387022\nChange-Id: I93171d1b967721acd3eca66a9b1eed60183a6fea\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8319729\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700510}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bb853d4472bec783c4e01febfb43318e22194219\n" }, { "commit": "3fe238c9a355c2f872f745e48c649b652afe4348", "tree": "3d9d451bfcfdd95666fd48df9dabfacf66c4c128", "parents": [ "d9c413368b7c05399462a9a4aeb0a91c1c042429" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri Sep 18 01:38:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 18 01:42:27 2026" }, "message": "Add arthursonzogni@chromium.org to PartitionAlloc OWNERS\n\nPropose arthursonzogni@chromium.org to help with code reviews in\nPartitionAlloc.\n\nBug: None\nChange-Id: Icfa4b7fec0a6ee4935c10fc43b16e756d59a0a2e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8421361\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1700381}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 45c3131af9cf9e669bd74d785ee6d9a0c2f0a09c\n" }, { "commit": "d9c413368b7c05399462a9a4aeb0a91c1c042429", "tree": "d264f0f871cf6ffc8fe3b8b0aec5f494e2c5a2ec", "parents": [ "19e7ac6b5e9c220684165cb27c2b6d39541a1873" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Wed Sep 16 14:25:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 14:32:43 2026" }, "message": "Make free a no-op during signal-driven shutdown on ChromeOS\n\nOn ChromeOS, exits triggered by signals bypass the standard shutdown\npath and can lead to shutdown hangs in PartitionAlloc. This change\ninvokes MakeFreeNoOp() in ExitHandler::ExitWhenPossibleOnUIThread on\nChromeOS to mitigate these hangs.\n\nAdditionally, InsertNoOpOnFreeAllocatorShimOnShutDown() is updated to be\nidempotent so that multiple invocations return early instead of failing\nan assertion. This is just in case there is some path from\nExitWhenPossibleOnUIThread to BrowserMainImpl::Shutdown, which I wasn\u0027t\nable to find.\n\nBug: 561483162\nChange-Id: If68422330b3a23cf19c6f4afad6ec1d437eaf741\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8409759\nReviewed-by: Colin Blundell \u003cblundell@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Colin Blundell \u003cblundell@chromium.org\u003e\nReviewed-by: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698917}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7ab2e5d16fd447fe1a2a6b060efdb3b3382aa501\n" }, { "commit": "19e7ac6b5e9c220684165cb27c2b6d39541a1873", "tree": "53d6c3a7927d7bb8917b6e993a6608f900ef41df", "parents": [ "f6c416cfa90ddf7dd582dc4c60e63c1d77ce2ebc" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Wed Sep 16 05:11:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 16 05:19:17 2026" }, "message": "Allowlist any target which has a public header include a private header\n\nThis is part of the check_includes_strict lsc (https://docs.google.com/document/d/1zYUC_zuFrZozo9ogFHcf0Rzkiw9W7RVnaY-1fzfQ0AM/edit?usp\u003dsharing)\n\nThese are more complex situations that will require nontrivial changes.\n\nGenerated via:\ngn check out/linux-x64 --error-limit\u003d999999 \u003e /tmp/errors.txt\ngn edit \"set check_includes_strict:expr CHECK_INCLUDES_STRICT_PUBLIC_INCLUDES_PRIVATE\" $(gn refs out/linux-x64 --default-toolchain $(grep \"Public headers cannot include private headers of the same target\" /tmp/errors.txt | egrep -o \"//[^:]*\" | sort | uniq))\n\nBug: 556959580\nChange-Id: I903434ed32aad05fb3c27bc34fbd82f36a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8413978\nAuto-Submit: Matt Stark \u003cmsta@google.com\u003e\nCommit-Queue: Matt Stark \u003cmsta@google.com\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nOwners-Override: Matt Stark \u003cmsta@google.com\u003e\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698638}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 53fc0e5d3871e25e7e599a3fe66f46392c9b3a52\n" }, { "commit": "f6c416cfa90ddf7dd582dc4c60e63c1d77ce2ebc", "tree": "41f43c51946d71d6a148ac1ba53da70fbb0649bc", "parents": [ "fe164fa9be04918d0e090fad8e9ae2cb308fa1ac" ], "author": { "name": "Foromo Daniel Soromou", "email": "koretadaniel@chromium.org", "time": "Tue Sep 15 20:40:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 20:45:48 2026" }, "message": "Add orphan worker_thread_unittest.cc in it BUILD.gn\n\nThe CL https://crrev.com/c/4952876 renamed the file\nworker_thread_unittest.cc, and then renamed it back in the CL\nhttps://crrev.com/c/5783349 but without adding it back in it BUILD.gn\n\nBug: None\nChange-Id: I14209604afa16b5a885e8308205a68dd194e05c7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8371582\nReviewed-by: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nCommit-Queue: Foromo Daniel Soromou \u003ckoretadaniel@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698354}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f62b9b9d32cef09b6a03015438eac7bb0d0dd1a3\n" }, { "commit": "fe164fa9be04918d0e090fad8e9ae2cb308fa1ac", "tree": "0be212747b8dd03422bef31a07827aed509796ad", "parents": [ "068786910975b708c50d856874469092abcc774e" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Sep 15 18:43:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 19:02:07 2026" }, "message": "partition_alloc: Move PartitionRootLock() forward decl to its own header\n\nMove the forward declaration for PartitionRootLock() from\npartition_alloc_forward.h to a new partition_root_internal_forward.h.\nInclude it where needed. Then stop including partition_alloc_forward.h\nin headers where it is not needed.\n\nChange-Id: Ic0b6fae74eafc59a20dff03e3e4dd49978f4dba0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8405105\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698266}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7ebd5ee0f570bc686fd7b86945e1469848763538\n" }, { "commit": "068786910975b708c50d856874469092abcc774e", "tree": "a49c0aadeef3eab00bf67975f95660df0628f67f", "parents": [ "1f6b7be2e356e04bbb108fa9edf727a80573db62" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Sep 15 18:39:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 18:47:30 2026" }, "message": "Remove superfluous includes for PA\u0027s component_export.h from headers\n\nPA headers that do not export do not need component_export.h.\n\nBug: 40318405\nChange-Id: I080085be9d4fe54975805dc7faac095c1296f4c3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8400961\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698264}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c5b72e181cd6c345dd7831f96b36d9a055c6ea0f\n" }, { "commit": "1f6b7be2e356e04bbb108fa9edf727a80573db62", "tree": "fa26112c1fca8c3533e183b7444adc9b7d12b9ec", "parents": [ "dd0036d9775c7103ff36a0f9fc8bfe8740c45e0f" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Tue Sep 15 17:56:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 18:01:51 2026" }, "message": "Spanification of base/allocator/partition_allocator/src/partition_alloc/pointers/raw_ptr_unittest.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known. The original\npatch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with jetski-cli and at last manually refined\n\nOriginal patch: patch_11.txt\n\nBug: 501143531\nChange-Id: I96ab1b60214b1e67bb7bb8e2142e169b77250452\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8359808\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698240}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8c01429e711254733c42aaacce9e6c097e3c09d0\n" }, { "commit": "dd0036d9775c7103ff36a0f9fc8bfe8740c45e0f", "tree": "236acf6b93ac81e49e4086b9ad18b860c805ff71", "parents": [ "8e376eee0206c80c1f4bc52c1c4eb98c7fdb1240" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Tue Sep 15 17:38:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 17:43:09 2026" }, "message": "Spanification of partition_alloc/pointers/raw_ptr_unittest.cc, etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known. The original\npatch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with jetski-cli and at last manually refined\n\nOriginal patch: patch_15.txt\n\nBug: 501143531\nChange-Id: Ibd6153f4d6a275e5b8c3b3fa5dae177f6a8f53b1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8360269\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698233}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 804c07d0a5fa54c7a69fe1e7a726f03cfa89d708\n" }, { "commit": "8e376eee0206c80c1f4bc52c1c4eb98c7fdb1240", "tree": "402be127ae78f464b62cde52cc659d405cf4ee99", "parents": [ "b20227957a154343c5b10d3f4c4bb1e8527f559b" ], "author": { "name": "Alex Mitra", "email": "alexmitra@chromium.org", "time": "Tue Sep 15 14:27:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 14:35:25 2026" }, "message": "Revert \"[PA] Consolidate PartitionAlloc TLS into a single structure.\"\n\nThis reverts commit 67b58121286da3189afe0e05570f4e0c70499cf8.\n\nReason for revert: Suspected cause of memory regression\n\nFailure Link: https://pinpoint-dot-chromeperf.appspot.com/job/157bfe49690000\n\nOriginal change\u0027s description:\n\u003e [PA] Consolidate PartitionAlloc TLS into a single structure.\n\u003e\n\u003e This CL renames partition_tls.h to tls.h and defines a single\n\u003e `PartitionTls` structure that holds all thread-unique objects used\n\u003e within PartitionAlloc. Specifically, it now holds the ThreadCache\n\u003e pointers and the disallow_allocations flag.\n\u003e\n\u003e This consolidation reduces TLS slot usage and minimizes code\n\u003e duplication. TLS creation remains non-allocating.\n\u003e\n\u003e To minimize overhead on allocation and deallocation hot paths:\n\u003e - Placed scalar flags at byte offset 0 of struct PartitionTls for\n\u003e D-cache locality.\n\u003e - Combined thread cache validity and bucket size checks into a single\n\u003e branch (bucket_index \u003c thread_cache-\u003eactive_bucket_count()) on hot\n\u003e paths, removing duplicate checks and redundant TLS lookups.\n\u003e\n\u003e TAG\u003dagy\n\u003e CONV\u003d80980e77-c356-4c8b-a00b-3a2c47533fbb\n\u003e\n\u003e Bug: 329027914\n\u003e Change-Id: If05f8f540281a135eba36aba872df424a4c208be\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8264055\n\u003e Commit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Reviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1688851}\n\nBug: 329027914\nChange-Id: Ic0a1771902cd4159e4571c563989e13e15fa0235\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8412606\nReviewed-by: Mateusz Zbikowski \u003czbikowski@google.com\u003e\nCommit-Queue: Alex Mitra \u003calexmitra@chromium.org\u003e\nOwners-Override: Anna Tsvirchkova \u003catsvirchkova@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698073}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 438d489235fc95769492fdb88920a78acee41f65\n" }, { "commit": "b20227957a154343c5b10d3f4c4bb1e8527f559b", "tree": "3c2ad8a1655c99e2fe887273109ec41672ce2f21", "parents": [ "25a216913163b3a8a7c12980909ee0239064e78f" ], "author": { "name": "Alex Mitra", "email": "alexmitra@chromium.org", "time": "Tue Sep 15 14:27:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 14:34:15 2026" }, "message": "Revert \"[PA] Replace largest_active_bucket_index_ with active_bucket_count_\"\n\nThis reverts commit 75f790d6fca4e88282c5d68c8f0faa40c45022c7.\n\nReason for revert: Parent CL is suspected cause of memory regression\n\nFailure Link: https://pinpoint-dot-chromeperf.appspot.com/job/157bfe49690000\n\nOriginal change\u0027s description:\n\u003e [PA] Replace largest_active_bucket_index_ with active_bucket_count_\n\u003e\n\u003e This CL renames `largest_active_bucket_index_` to `active_bucket_count_`\n\u003e in `ThreadCache` and `ThreadCacheRegistry`, and optimizes hot-path\n\u003e validity and bucket bounds checks in PartitionAlloc (`bucket_index \u003c\n\u003e tcache-\u003eactive_bucket_count()`).\n\u003e\n\u003e This makes use of zero-initialized `ThreadCache` safer - it simply\n\u003e denotes there is no active bucket and routes every allocation to the\n\u003e global root instead.\n\u003e\n\u003e TAG\u003dagy\n\u003e CONV\u003d80980e77-c356-4c8b-a00b-3a2c47533fbb\n\u003e\n\u003e Change-Id: Ie599f94695b8f5d1662da26f5efd2ad9fa6b021a\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254723\n\u003e Reviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\n\u003e Commit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1690469}\n\nChange-Id: I399006f53b684b1575abf5ffe32eae791e4fa03f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8408627\nOwners-Override: Anna Tsvirchkova \u003catsvirchkova@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Alex Mitra \u003calexmitra@chromium.org\u003e\nReviewed-by: Mateusz Zbikowski \u003czbikowski@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1698072}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7722d5682e81c10e435d72e0b4a6ed1fc67853a9\n" }, { "commit": "25a216913163b3a8a7c12980909ee0239064e78f", "tree": "bb7db4d9e0c9f4c6fdcc534259267b4026268399", "parents": [ "0fb0e3e45aeab84781a0c515298b40363f2bf312" ], "author": { "name": "Alex Mitra", "email": "alexmitra@chromium.org", "time": "Tue Sep 15 14:25:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 14:33:11 2026" }, "message": "Revert \"[PA] Introduce PartitionTlsRegistry to track PartitionTls instances\"\n\nThis reverts commit 33ce22068bdb197fc227e9313a5d49432b30bd6b.\n\nReason for revert: Dependent on CL chain suspected to cause memory regression\n\nFailure Link: https://pinpoint-dot-chromeperf.appspot.com/job/157bfe49690000\n\nOriginal change\u0027s description:\n\u003e [PA] Introduce PartitionTlsRegistry to track PartitionTls instances\n\u003e\n\u003e With this, we can iterate through active `PartitionTls` members.\n\u003e\n\u003e Change-Id: Id7b0ed89c768cf70b351e00e6ab521377c78f372\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366011\n\u003e Commit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\n\u003e Reviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1695581}\n\nChange-Id: I5e7d58532c3789beb8433234c157057ede2575e5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8413365\nOwners-Override: Anna Tsvirchkova \u003catsvirchkova@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Mateusz Zbikowski \u003czbikowski@google.com\u003e\nCommit-Queue: Alex Mitra \u003calexmitra@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1698070}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9467d08d9e085700a4e184f5ff22568291b718eb\n" }, { "commit": "0fb0e3e45aeab84781a0c515298b40363f2bf312", "tree": "a584889f216e30bf4bd4ceac065b78da7bcb294f", "parents": [ "59c8c4f88fe20470be030c106f361d719127d068" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Sep 15 06:07:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 15 06:11:25 2026" }, "message": "PA: `const SlotSpanMetadata*` to `...BucketSizeDetails()`\n\nGetting a `BucketSizeDetails` doesn\u0027t mutate the `SlotSpanMetadata`.\nMake it const.\n\nChange-Id: Id7888dc8d416228409c2017c0e1bd407204c7c8a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8397647\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1697847}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7d7f989b3b98f0b79352c2b99bb22eb45fc14801\n" }, { "commit": "59c8c4f88fe20470be030c106f361d719127d068", "tree": "df7784ed3e3039ee7f1b0914ed3f2ed74e1c2e4a", "parents": [ "14f58fb57beeaa751d8b917ca66d42cdeb107da3" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Sep 11 18:47:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 18:56:09 2026" }, "message": "Spanification of partition_alloc_base/cpu.cc, etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 501143531\nChange-Id: I94df85634204591c7d552b6b8b64be6f9e402359\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833057\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1696480}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2c2d0e7e82122eabbf20f00f74e8e0d4187746bd\n" }, { "commit": "14f58fb57beeaa751d8b917ca66d42cdeb107da3", "tree": "6381dcb03432624159fd672795efa6ec097d15ac", "parents": [ "7a355f7f5176462be645b41bed68e25c7a59b0c2" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Sep 11 17:50:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 11 17:59:41 2026" }, "message": "Spanification of partition_alloc/pointers/raw_ptr_unittest.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 501143531\nChange-Id: Ib8a48320e8a6b7e3db0b02412bd708d94a85696f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834126\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1696422}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: febf09c5b8156af64e709eadf1580623e9b1e230\n" }, { "commit": "7a355f7f5176462be645b41bed68e25c7a59b0c2", "tree": "68da482c751d92c6d37db06157ad1a713befb459", "parents": [ "4c253845862d4d860f0650088cb7383f050b7a7c" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Sep 10 20:01:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 20:07:32 2026" }, "message": "Spanification of partition_alloc/partition_alloc_check.h\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 501143531\nChange-Id: I2621d6874d02a429aea43e09a52e31e6092cde5e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833832\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695599}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f099401af5041072a9f42e88b25174d6e7d5b83d\n" }, { "commit": "4c253845862d4d860f0650088cb7383f050b7a7c", "tree": "41c89e062c0a5d948e96dff5d695cf16255bb29b", "parents": [ "756d4746d7571e143bae6486f32eea5948c26763" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Thu Sep 10 19:41:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 19:47:30 2026" }, "message": "[PA] Introduce PartitionTlsRegistry to track PartitionTls instances\n\nWith this, we can iterate through active `PartitionTls` members.\n\nChange-Id: Id7b0ed89c768cf70b351e00e6ab521377c78f372\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366011\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695581}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 33ce22068bdb197fc227e9313a5d49432b30bd6b\n" }, { "commit": "756d4746d7571e143bae6486f32eea5948c26763", "tree": "ee9a6efb746b392bede9cc9901e7f511cec82e31", "parents": [ "df749d8b72960990ea952d37e58a0c45e9ba5683" ], "author": { "name": "Anton Bikineev", "email": "bikineev@chromium.org", "time": "Thu Sep 10 08:46:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 08:52:41 2026" }, "message": "base: add bikineev@ as owner partition_alloc\n\nChange-Id: I9846df6670d95a1345e8764e6599b8e537a2ec17\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8378924\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nCommit-Queue: Anton Bikineev \u003cbikineev@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695275}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b08d98a3ed3a1b9d5622797951babdae88074187\n" }, { "commit": "df749d8b72960990ea952d37e58a0c45e9ba5683", "tree": "445a7879ee5adc6050f5fa0ff30bd812c73a733f", "parents": [ "07d8a85d5a0c3eb9f08fb7a02c89bbe60ae91382" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Thu Sep 10 06:07:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 06:11:54 2026" }, "message": "PA: Remove wrong PA_DCHECK() from Partitionroot::DumpStats()\n\nSince total_size_of_allocated_bytes_ and max_size_of_allocated_bytes_\nare not guarded by PartitionRootLock, DumpStats() can be invoked while\ntotal_size_of_allocated_bytes_ is updated but\nmax_size_of_allocated_bytes_ is being updated. In the case,\nPA_DCHECK(total_size_of_allocated_bytes_ \u003c\u003d\nmax_size_of_allocated_bytes_) will fail. This causes CQ flakes.\n\nBug: crbug.com/559347431\nChange-Id: Iaa705a7eeaf346e4a7232e6a96b11a09bdda1bf8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8382884\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1695198}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 86b0a7f603bb8a8da01b2275f3d69eb2abd818d7\n" }, { "commit": "07d8a85d5a0c3eb9f08fb7a02c89bbe60ae91382", "tree": "2e4ba4012ada0eb8ca555d9fde3f7e9be56dc0e4", "parents": [ "15ecfb71e6cf3b622a1cf9cf98ee989cfa4d93a6" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Thu Sep 10 05:28:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 10 05:34:16 2026" }, "message": "[PA] Add mikt@google.com to PartitionAlloc OWNERS\n\nChange-Id: I08d66afb2b7827faa2617a3407d5282d3249a1ab\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8361455\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695183}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 759d01c64f0f656caa6c400acdec52347688c1c2\n" }, { "commit": "15ecfb71e6cf3b622a1cf9cf98ee989cfa4d93a6", "tree": "4f4b0a626823b789d95a9ba03f15086831809e31", "parents": [ "06f54f982c4e503f8db11be06a323b30edebb52c" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Sep 09 23:53:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 23:57:42 2026" }, "message": "Spanification of partition_alloc/partition_bucket.cc, etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 501143531\nChange-Id: I2e6303e618113032eb16f5367bfe2c75f30c6a39\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833060\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1695020}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: baa94ecf024a9570bfa1fd097956a0493a197e89\n" }, { "commit": "06f54f982c4e503f8db11be06a323b30edebb52c", "tree": "17f39f6bcc0d6bad77f10f390956424d1125fa8e", "parents": [ "a7c4a41616983719bd0b35372176a8f69b816312" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Wed Sep 09 16:33:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 16:39:26 2026" }, "message": "[PA] Decouple PartitionAlloc perftests into standalone target\n\nMove partition_alloc_perftest.cc and partition_lock_perftest.cc out of\nbase_perftests into a dedicated partition_alloc_perftests target.\n\n- Introduce LapTimer in partition_alloc_base/timer/lap_timer.{h,cc} using\n PA\u0027s internal base time utilities.\n- Update partition_alloc_perftest.cc and partition_lock_perftest.cc to\n use partition_alloc_base headers and annotations.\n- Define test(\"partition_alloc_perftests\") in\n base/allocator/partition_allocator/src/partition_alloc/BUILD.gn.\n- Remove PA sources and test_support dependency from base_perftests in\n base/BUILD.gn.\n- Remove PartitionAllocatorWithAllocationStackTraceRecorder from\n partition_alloc_perftest.cc. It depended on //base/allocator/dispatcher\n and //base/debug/allocation_trace.h under\n ENABLE_ALLOCATION_STACK_TRACE_RECORDER, which cannot be used in\n standalone PA. This removal is safe because the flag is disabled by\n default on all platforms except Android Arm64, and the perf waterfall bots\n running these perftests are desktop builders where it was always\n compiled out. If benchmarking stack trace recording is needed in the\n future, a dedicated benchmark can be added directly in base_perftests.\n\nTAG\u003dagy\nCONV\u003d39f5a12b-07dd-45ea-bc29-f8fb13fbba35\n\nBug: 40158212\nChange-Id: I3f075412ad21ede2eb263f2dae8faec339b0f011\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8365564\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1694655}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c2b13d4fe76392c0ea0ca4ad70b0bfab5f05d1d6\n" }, { "commit": "a7c4a41616983719bd0b35372176a8f69b816312", "tree": "f1f53331a40ea393aaff84baf99ad729ed86aeaf", "parents": [ "072eb326ad43010d475bd79e097a2e9b558077b4" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Wed Sep 09 09:06:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 09:11:29 2026" }, "message": "PA: Collate output arguments\n\n`RawAlloc()` and `AllocInternal()` have a long list of output arguments.\nThis CL organizes them into return values to hopefully reduce some\nvisual clutter and prevent them from growing any longer.\n\nThis CL does not appear to regress competitive benchmarks.\n\nThis CL was generated by Jetski.\n\nChange-Id: I11c0b3d950ebbd40d569336415fba6dda7c2db46\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8354865\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694434}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 58f939b583da9c2b7a333d7869c7a37f15b057a3\n" }, { "commit": "072eb326ad43010d475bd79e097a2e9b558077b4", "tree": "04bbb1da408dd7a3b636b6c0e56841845779dd96", "parents": [ "809402f54f558a0a41f3bfd0d2b62770f7273166" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Wed Sep 09 09:03:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 09:10:37 2026" }, "message": "PA: `ThreadCache::GetFromCache() -\u003e SlotAddressAndSize`\n\nLet the slot size output argument simply come back in the ready-baked\nstruct.\n\nThis CL was generated by Jetski.\n\nChange-Id: Id0c51bc10ea7878fed9f6a0525547588d9053c4d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8365989\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1694430}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 979d28fde010cb90fd584addac28c52ce370273d\n" }, { "commit": "809402f54f558a0a41f3bfd0d2b62770f7273166", "tree": "7835f59da40cd9efd7edf98ff7b866e330dddd35", "parents": [ "c0919ce6630f4e86c16c3522551f8f7164d08602" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Wed Sep 09 04:16:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 04:22:36 2026" }, "message": "Move shared partition_alloc test headers to test_support\n\nMove partition_alloc_base/test/gtest_util.h and use_death_tests.h to\n//base/allocator/partition_allocator/src/partition_alloc:test_support so\nthey are not duplicated across :unittests and :death_unittests.\n\nBug: 500845363\nChange-Id: Ie7a7996a8dce4e64cc49f7412a53a7646a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8366107\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nAuto-Submit: Matt Stark \u003cmsta@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1694331}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3d8efd95864015082fccf40b881aedadbff583f3\n" }, { "commit": "c0919ce6630f4e86c16c3522551f8f7164d08602", "tree": "f5568ed39bab0bebf28e7fd211d9b2cab1b78d22", "parents": [ "82539aa7955685f655ffd15679d46ec87f59e0f2" ], "author": { "name": "Mitsuru Oshima", "email": "oshima@chromium.org", "time": "Wed Sep 09 02:40:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 09 02:47:18 2026" }, "message": "base: Clean up redundant include rules\n\nClean up redundant specific_include_rules across base/ DEPS files.\n\nThis cleanup was performed by the WIP faster checkdeps tool\n(go/faster-checkdeps).\n\nR\u003dthakis@chromium.org\nTAG\u003dagy\nCONV\u003d137fb5a6-adc8-4dc7-bfb1-5f3e135331b2\n\nBug: 556482043\nChange-Id: I0706bfd0aab622022f02bae5a2fc406748a5c35b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8348747\nAuto-Submit: Mitsuru Oshima \u003coshima@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1694298}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f8f16c718cde5cc65399248d0ea15a95f1eb8eb5\n" }, { "commit": "82539aa7955685f655ffd15679d46ec87f59e0f2", "tree": "7e1bc66fed0be07f5d7c906bdd2214ce752285ae", "parents": [ "68303b210a1860c3a7dfb8f77fd2256dd1203af9" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Tue Sep 08 05:49:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 08 05:54:54 2026" }, "message": "Run `gn format` on all build files\n\nThe main purpose of this is to ensure that the recent change to the\nformatter which requires blank lines between targets is applied to the code.\n\nChange-Id: I3b39867342b312935165233e6a6668876a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8350948\nAuto-Submit: Matt Stark \u003cmsta@google.com\u003e\nCommit-Queue: Matt Stark \u003cmsta@google.com\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nOwners-Override: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693558}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 51d2448c9b469ac9a7e5fd349a624c71291a7510\n" }, { "commit": "68303b210a1860c3a7dfb8f77fd2256dd1203af9", "tree": "2a6f21ae89eee97c8dc95759898168521d900a10", "parents": [ "4c551f36f30402aa4a6df7d27987adf503f5b85b" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Mon Sep 07 13:04:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 07 13:09:37 2026" }, "message": "Spanification of partition_alloc/gwp_asan_support.cc etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nEmbed the sentinel bucket directly as the last element of the\nPartitionRoot::buckets_ array by sizing it to\n`BucketIndexLookup::kNumBuckets + 1`. Previously, `buckets_` only\ncontained `BucketIndexLookup::kNumBuckets` elements with\n`sentinel_bucket_` stored as an adjacent member. Accessing\n`bucket_at(kNumBuckets)` relied on struct layout and was technically an\nout-of-bounds array access that triggered UBSan (crbug.com/1150772),\nrequiring `PA_NO_SANITIZE(\"undefined\")` on `bucket_at()`. Now that the\nsentinel bucket is part of the `buckets_` array, accessing index\n`kNumBuckets` is well-defined and strictly in-bounds. This allows\n`PA_NO_SANITIZE(\"undefined\")` on `bucket_at()` and the layout\n`static_assert` in partition_root.cc to be safely removed.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ib07e6fc25d587d3dc97a69dc729dca0ab13eaa68\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7980702\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1693306}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 85d7d3294ab5f364ad17a326980aab51561f6b12\n" }, { "commit": "4c551f36f30402aa4a6df7d27987adf503f5b85b", "tree": "9c8ea1685f20270446b2b56d5c4d814411eda42c", "parents": [ "5db1967fdd5975c5ec302e0a7e847a2e65ebc027" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Sep 07 05:05:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 07 05:10:45 2026" }, "message": "Checked Span: Adjust usable size functions\n\nThis CL\n\n* introduces the basic typedef for the Checked Span \"smuggled size\"\n (to be used downstream)\n\n* conceptually splits PA\u0027s usable size functions into external and\n internal variants. The \"external\" versions account for the \"smuggled\n size\" and subtract as necessary, while the internal versions do not\n (because there is no need to do so at this time).\n\nBug: 534387022\nChange-Id: Ibfa6f1babbf83826f5533d7e49a0940c50040893\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8319728\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1693127}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dfd461fe40d610af66d4c734011543451454e1c5\n" }, { "commit": "5db1967fdd5975c5ec302e0a7e847a2e65ebc027", "tree": "388ae1a60e938de142730c11ff92549700533574", "parents": [ "70d897dd9c7a2f9ee8d1b5e507fe6dedf2e1f161" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Fri Sep 04 18:01:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 04 18:07:13 2026" }, "message": "partition_alloc: Move LINUX_NAME_REGION define to its own header\n\nIt is not really a constant, and it is only used in a few places, so\nmove it out of page_allocator_constants.h. This avoids transitively\nincluding \u003csys/prctl\u003e in 70% of all translation units.\n\nChange-Id: I9bfa73ccf2e61752fd0aa08655e03d3b475e7ad9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8300913\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1692596}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 62584b68fa64cab8301ef848b86661065f7ff497\n" }, { "commit": "70d897dd9c7a2f9ee8d1b5e507fe6dedf2e1f161", "tree": "767b7b54551bbee6df930b8334bfe3bf10297a1d", "parents": [ "0a045173c419b08f52126a1d0b39676d1fe74319" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Sep 04 08:11:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 04 08:22:00 2026" }, "message": "Checked Span: Clarify \"smuggled\" size bits\n\n`InSlotMetadata` can store the requested size properly as an inline\nextra (given the particular build configuration). To avoid any confusion\nwith this feature, rename the Checked Span setters / getters to use the\n\"smuggled size\" naming instead.\n\nFuchsia-Binary-Size: Chained CL.\nBug: 534387022\nChange-Id: I115acbdcb0195da0a749d4f76e67ba4e65bff446\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8319727\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1692255}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7b5dcdc336fc85492766270e54d1dc01c9c757d0\n" }, { "commit": "0a045173c419b08f52126a1d0b39676d1fe74319", "tree": "8a52904455e7d29a316b0804cc6afe9203ad9dec", "parents": [ "a572625cb5090f73bda24fb36c84bba1eaa63b49" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Sep 04 08:05:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 04 08:13:26 2026" }, "message": "PA: Plumb bool showing if slot can store raw size\n\nIn dealing with Checked Span slack space, for the cases where the\n`InSlotMetadata` would be stored out-of-line, we also don\u0027t want to\nsmuggle the requested size in at the end-of-slot: we should prefer to\n(subtract extras size and) read the raw size directly.\n\nTo set this bit properly, this CL adds plumbing to surface this\ninformation in the allocation path.\n\nFuchsia-Binary-Size: Size increase is unavoidable.\nBug: 534387022\nChange-Id: I83194f32dd13298c880b31971a6eb5010a525684\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256815\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1692251}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6ace159a150729864bdb2f7dbcd4a62973de45fb\n" }, { "commit": "a572625cb5090f73bda24fb36c84bba1eaa63b49", "tree": "57c24922419e533f18cf58df6271f759ca81787a", "parents": [ "37879b565bbd0749062156c67673e5755cac9464" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Wed Sep 02 05:38:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Sep 02 05:42:55 2026" }, "message": "[PA] Replace largest_active_bucket_index_ with active_bucket_count_\n\nThis CL renames `largest_active_bucket_index_` to `active_bucket_count_`\nin `ThreadCache` and `ThreadCacheRegistry`, and optimizes hot-path\nvalidity and bucket bounds checks in PartitionAlloc (`bucket_index \u003c\ntcache-\u003eactive_bucket_count()`).\n\nThis makes use of zero-initialized `ThreadCache` safer - it simply\ndenotes there is no active bucket and routes every allocation to the\nglobal root instead.\n\nTAG\u003dagy\nCONV\u003d80980e77-c356-4c8b-a00b-3a2c47533fbb\n\nChange-Id: Ie599f94695b8f5d1662da26f5efd2ad9fa6b021a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8254723\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1690469}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 75f790d6fca4e88282c5d68c8f0faa40c45022c7\n" }, { "commit": "37879b565bbd0749062156c67673e5755cac9464", "tree": "b51cd916354274e4360373717cb2cf8259b1531e", "parents": [ "c029851c21b7e1154fa3964e08c97710adc92cc7" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Tue Sep 01 20:45:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 20:49:52 2026" }, "message": "Spanification of partition_alloc_base/files/file_util.h\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I54710bea524e4ae5f38dfe201775e22fdf123d6a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834023\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1690083}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5c6fb26e6d58c1a3ef7890d0115610e99a327245\n" }, { "commit": "c029851c21b7e1154fa3964e08c97710adc92cc7", "tree": "89baae34837db5e2026089887bd6cc2fabd2853c", "parents": [ "fa8d9a4fb4ca3af310cc5826b8cc15047e6506f3" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Tue Sep 01 03:34:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 03:39:43 2026" }, "message": "[PA] Make SlotStart family aggregate types\n\nUnder the MSVC x64 ABI, user-defined types (even if \u003c\u003d 8 bytes) are not\nreturned in %rax if they possess user-declared constructors or private\nnon-static data members. Instead, MSVC passes a hidden return pointer in\n%rcx (sret), shifting all parameters by one register and forcing a stack\nbuffer allocation, memory write, and memory reload on every function\nreturn.\n\nBy making the address_ member public and removing user-declared\nconstructors (allowing the compiler to implicitly generate default\nconstructors and enabling aggregate initialization), SlotStart,\nSlotSpanStart, and UntaggedSlotStart become standard-layout aggregates.\nUnder MSVC x64, functions returning SlotStart now return directly in\n%rax without any hidden return pointer or stack slot indirection.\n\nTAG\u003dagy CONV\u003da2a703a3-6e04-439a-828c-c3acc7324bd0\n\nChange-Id: Ib61d2d58c0df5738666f36ef1ac8e2789f46c74c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8333627\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1689593}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 54228d3ca16a4164d3860c2dd9a83c670e1b443c\n" }, { "commit": "fa8d9a4fb4ca3af310cc5826b8cc15047e6506f3", "tree": "029452fc58d7e1b652c5bb8eddc37090bf8360da", "parents": [ "eba8297f08e73f28789b4119b72760730967e2d5" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Tue Sep 01 02:57:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 03:02:11 2026" }, "message": "Spanification of partition_alloc_base/strings/safe_sprintf_pa_unittest.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ic69a1d6adb9fc76668ebe1c1f6ca4e4d835239b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833749\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1689565}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0b86d7379f878a9f2ef57bf64326e99a2b9daa3d\n" }, { "commit": "eba8297f08e73f28789b4119b72760730967e2d5", "tree": "639e9f9fb58dadbe1dd43bb232561ee8c046ca3c", "parents": [ "89615a645f0220fb03875111c2d9ae4dea9887d8" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Tue Sep 01 00:04:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 00:08:54 2026" }, "message": "Spanification of partition_alloc_base/posix/safe_strerror.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I98ca0d14df25278bc980aa31ad546392c4ee2488\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834548\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1689424}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ceaf0dae1e2fff8c957fc0a6ea02cec3b049950c\n" }, { "commit": "89615a645f0220fb03875111c2d9ae4dea9887d8", "tree": "cbfafe785d9c34a25e2e1725c30dc94ea82d871c", "parents": [ "a1cd1335c8a860ac622b4b9686f43bd1ff68dcd5" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Mon Aug 31 09:51:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 09:56:16 2026" }, "message": "PA: Make SchedulerLoopQuarantineBranch use `enum class QuarantineTarget`\n\nChange the type of the second template parameter of\n`SchedulerLoopQuarantineBranch` from `bool` to `enum class\nQuarantineTarget`.\n\nquarantine, and QuarantineTarget::kSanitizedObject is for AdvancedMemorySafteyChecks-macro based quarantine.\n\nQuarantineTarget: :kMiracleObjects is for task-scheduler aware\nChange-Id: I882abec82fb41eda123ecfc056a32cb8a348b8f1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8294538\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1688923}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e2c6d7b3c116e04524baaef274ec965a63739055\n" }, { "commit": "a1cd1335c8a860ac622b4b9686f43bd1ff68dcd5", "tree": "87c11784964157b8ae97acb06c24f50d0de90a15", "parents": [ "649c2cda65039d9ef85d816f0d46e9ef5d23d207" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Mon Aug 31 08:41:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 08:46:08 2026" }, "message": "[PA] Derive intended-leak behavior from the owning root\n\nAllow PartitionRoot to be configured with\nPartitionOptions::intended_leak, mirrored into Settings. When enabled,\nany allocation freed through PartitionAlloc (including free(),\nsized/aligned delete, and realloc copy-then-free) is automatically\nsanitized and leaked in RawFreeWithThreadCache() after the ThreadCache\ndeallocation path.\n\nEnforce invariant checks that thread_cache and BRP cannot be enabled on\nan intended-leak root both during PartitionRoot::Init() and within\nPartitionRoot::EnableThreadCacheIfSupported().\n\nConfigure the allocator shim\u0027s intended leak root with intended_leak \u003d\nkEnabled.\n\nBug: 546295511\nChange-Id: I41dd987d1d61853a7b999fd3ee0cfdda3bb2d68a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256709\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1688890}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 299f6bb2b1b02ce86ed49cffd591fe3cdb46c355\n" }, { "commit": "649c2cda65039d9ef85d816f0d46e9ef5d23d207", "tree": "06caed286de8f63dfee0c333ac095074fc5e467c", "parents": [ "f0d1e646eb41d8736261d5d8d8f094404bac62ac" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Mon Aug 31 06:56:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 07:01:12 2026" }, "message": "[PA] Consolidate PartitionAlloc TLS into a single structure.\n\nThis CL renames partition_tls.h to tls.h and defines a single\n`PartitionTls` structure that holds all thread-unique objects used\nwithin PartitionAlloc. Specifically, it now holds the ThreadCache\npointers and the disallow_allocations flag.\n\nThis consolidation reduces TLS slot usage and minimizes code\nduplication. TLS creation remains non-allocating.\n\nTo minimize overhead on allocation and deallocation hot paths:\n- Placed scalar flags at byte offset 0 of struct PartitionTls for\n D-cache locality.\n- Combined thread cache validity and bucket size checks into a single\n branch (bucket_index \u003c thread_cache-\u003eactive_bucket_count()) on hot\n paths, removing duplicate checks and redundant TLS lookups.\n\nTAG\u003dagy\nCONV\u003d80980e77-c356-4c8b-a00b-3a2c47533fbb\n\nBug: 329027914\nChange-Id: If05f8f540281a135eba36aba872df424a4c208be\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8264055\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1688851}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 67b58121286da3189afe0e05570f4e0c70499cf8\n" }, { "commit": "f0d1e646eb41d8736261d5d8d8f094404bac62ac", "tree": "d23874cdf642bc0caf3a89d7fb5017cea9520778", "parents": [ "1f5d57db1b2c9dfcb5cabca3ec879fbe39f21619" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Mon Aug 31 03:16:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 03:19:58 2026" }, "message": "[PA] Move SlotStart out of internal namespace\n\nExpose (Untagged)SlotStart in partition_alloc namespace as part of the\npublic API, given that those types are used by external components like\nGWP-ASan.\n\nTAG\u003dagy\nCONV\u003d752bd6a5-c227-42f7-abbe-f4394e8f914f\n\nBug: 553258782\nChange-Id: Ifb98335c21197731a2b7d9baa0f64a4ab9657fed\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8303792\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1688806}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a8ce70df9da4d58740e4581d61d1bb5bcaae205a\n" }, { "commit": "1f5d57db1b2c9dfcb5cabca3ec879fbe39f21619", "tree": "5d6b4ff0e42fa18e39dfba3fb1a342cdc5041cf6", "parents": [ "15bf773bf769a1255068b31ecf5cddca3c86ffd8" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 28 08:54:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 08:58:30 2026" }, "message": "[PA] Support maximum AllocToken IDs\n\nCurrently, the maximum number of AllocToken IDs is set to 2.\nThis CL increases it to the maximum supported value (SIZE_MAX).\n\nBug: 549500187, 549496291, 477186304\nChange-Id: I98426ac4141793ccc25f3c32e8e5b3a91b3640af\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8284578\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687857}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 825e8de34d6b24acde630f14f7b99c3d72d9ad21\n" }, { "commit": "15bf773bf769a1255068b31ecf5cddca3c86ffd8", "tree": "ffa6c82f71c6eb6cf9c35ef9406943c96383d284", "parents": [ "876243f2898c59de983673645438d61f794680e5" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 28 08:18:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 08:25:30 2026" }, "message": "[PA] Decouple AllocToken from partition index\n\nCurrently, the AllocToken is used directly as the partition index.\nHowever, as upcoming work, we plan to increase the maximum number of\nAllocTokens from 2 to 2^32-1.\n\nTo prepare for this change, this CL decouples them in both directions:\n(1) AllocToken -\u003e partition index mapping: Introduces a mapping function (`PartitionIndexFromAllocToken`) to resolve the partition index from an AllocToken.\n(2) Partition index -\u003e AllocToken mapping: Defines a dedicated default value `kDefaultAllocTokenValue` instead of using `kDefaultPartitionIndex` for default AllocToken value.\n\nBug: 549500187\nChange-Id: Ib2201c6202c6a0211253dbe8fd948c133dcb2ecf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8264052\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687842}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2cbf35b67a1f0dafa4ff675ed404af0d5b2791ff\n" }, { "commit": "876243f2898c59de983673645438d61f794680e5", "tree": "86cb198ff491f3192715b3559319b7d0a1ecfa19", "parents": [ "21aca3fea44602829331cadec6a94364d3edcb52" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Fri Aug 28 07:05:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 07:14:06 2026" }, "message": "[PA/MO] Add an option to apply quarantine only to IPC-triggered tasks\n\nGiven that IPC-triggered tasks may contain web-controlled behavior,\nwe would like to have a configuration to perform quarantine only in such\ncondition.\n\nTAG\u003dagy\nCONV\u003d958945a5-4b47-4611-afe0-c9f4fbee0c41\n\nBug: 329027914\nChange-Id: Ib31921cc233f1cbbc7e9b1c200dcf8a5239da9bf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7863493\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1687816}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 47e308465ac27fd17708b23ce753bb3fd75a20f3\n" }, { "commit": "21aca3fea44602829331cadec6a94364d3edcb52", "tree": "4014293499a53c31348bb0305e18731e3201b226", "parents": [ "990382a359fd577b9cb92d4aa205993a80690813" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Aug 28 06:38:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 06:42:56 2026" }, "message": "PA: Remove `base/augmentations/`\n\nThis isn\u0027t really necessary. Remove the directory, the reference in the\n`README.md`, and merge the non-null attribute into the main body of\n`compiler_specific.h`.\n\nWhile we\u0027re at it, update `compiler_specific.h` with the canonical\n`//base` copy. Note that a few entries are exclusive to ours:\n\n* `PA_EXCLUDE_FROM_EXPLICIT_INSTANTIATION` and\n* `PA_NOPROFILE`\n\nReviewing notes:\n* patchset 1: informational dump of `base/compiler_specific` into\n `partition_alloc_base/`.\n* patchset 2: first draft, copying everything and prefixing `PA_`\n everywhere.\n* patchset 3: remove unused things to almost satisfy the compile size\n checker.\n\nThis CL was generated with Jetski.\n\nCompile-Size: We prefer not to strip all comments from this header.\nChange-Id: If9fa1076df7ef429562eaf1cffd4da881c8584f9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8302474\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687809}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7f2ec1d6e864cdcc5a2818726656b28e322ec140\n" }, { "commit": "990382a359fd577b9cb92d4aa205993a80690813", "tree": "f742dce16a0dcff22f69565e9a4f268c3d6efe24", "parents": [ "e4d2f0370f1a10092bb5b025e9e2dd9c7a904881" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Fri Aug 28 04:42:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 04:47:20 2026" }, "message": "Prevent a realloc slot reuse with live raw_ptr refs\n\nPreviously for allocations that requested a new smaller size, we\nwouldn\u0027t look at the value of the ref count of BRP. This means that if\nwe decided to reuse the slot all the raw_ptrs remain valid and pointing\ninto the slot.\n\nHowever this could mean for slots both slots that can_store_raw_size or\neven regular slots that get realloc\u0027d for a new purpose, that the old\nraw_ptrs could still be accessed essentially allowing a UaF because they\ndidn\u0027t properly quarantine.\n\nWe fix this by checking the ref count and rejecting in place realloc if\na raw_ptr is alive and pointing to this slot (we can continue to realloc\nif there are no raw_ptr referencing this slot).\n\nTwo regression tests are added one for direct map and one for thread\ncache level allocations.\n\nBug: 549709219\nChange-Id: I031eebc435f452626a285ca14d9ff361aebd530e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8294158\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687767}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e5b9eae52a251d6c1b499b7e33f99ab15484f48d\n" }, { "commit": "e4d2f0370f1a10092bb5b025e9e2dd9c7a904881", "tree": "c0ad9a02940333d01375dc11832145d371da3807", "parents": [ "b49162b4623586983e6543c187a739e2ef2ea1d6" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:22:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:29:51 2026" }, "message": "ReallocProtectedIterator: Use `std::optional`\n\nAs a follow-up to https://crrev.com/c/8276244,\navoid using the default-constructed\n`partition_alloc::SlotAddressAndSize` (all zeros) as a sentinel value;\nexplicitly use `std::nullopt` to cover these cases.\n\nNote that `SlotAddressAndSize::From()` is never expected to return 0\u0027s;\nthis CL simply covers the case where we would deliberately want to\ndenote \"no value stored in `slot_`\".\n\nChange-Id: I61528313eb30159959acdb3db876751f68c64f43\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8295498\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687034}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dc71c83a5fb4ae67622617142765e3356a8c7e69\n" }, { "commit": "b49162b4623586983e6543c187a739e2ef2ea1d6", "tree": "912e8359bc6f68928c50a1538d9e74f9f0ce53f6", "parents": [ "f755cc4b658352715cf5280f5d14510200f5dc39" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:22:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:29:13 2026" }, "message": "PA: Adjust args to `FreeAfterBRPQuarantine()`\n\nFurther propagate `SlotAddressAndSize` for improved ergonomics.\n\nChange-Id: I554ab45de97c0662362b3d63ed147e6c68400324\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8282223\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687033}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c52f709dfb70db4cadc92379b17294b3056a142e\n" }, { "commit": "f755cc4b658352715cf5280f5d14510200f5dc39", "tree": "c816df9624062bfc6922d3c1fe8eba00b897ab5e", "parents": [ "d9b0e26a791f3c8c01ad7eec028bff6b30f5f1bc" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:15:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:25:59 2026" }, "message": "PA: Introduce `InSlotMetadata::From()`\n\nto replace `PartitionRoot::InSlotMetadataPointerFromSlotStartAndSize()`,\nwe introduce a static getter that directly accepts a\n`SlotAddressAndSize`.\n\nThis CL was generated with Jetski.\n\nChange-Id: I2ae4fbaf1e204d5b2d74a3b123308505e77b169a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279193\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687027}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e1ada26e7dbef7721504912c22cdb4872c2bfbd6\n" }, { "commit": "d9b0e26a791f3c8c01ad7eec028bff6b30f5f1bc", "tree": "1cb0c1cb780dc1e740e03132c7340492005d7d5d", "parents": [ "46c370799fc1274f0bb0393abed545e57a482027" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 27 08:13:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 08:18:11 2026" }, "message": "ReallocProtectedIterator: Use PA struct\n\n`internal::WrappedBackingSlot` has (semantically) the same members as\n`partition_alloc::SlotAddressAndSize`, plus an extra `explicit operator\nbool()` used just once in the implementation.\n\nThis CL removes the indirection by just using `SlotAddressAndSize`\ndirectly, preventing the shucking/repacking cycles.\n\nThis CL was generated with Jetski.\n\nChange-Id: Iff3cee6afeeab897b80a5913150898e7d7416ebe\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276244\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1687026}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e7a328068e889f855ecf1d0e2e89c23e8e098bd3\n" }, { "commit": "46c370799fc1274f0bb0393abed545e57a482027", "tree": "f7cd22bb4d2f6005ab021b411e69250cae99dd4e", "parents": [ "940e80830ad7b176f7b5ef129ca2683006fb4c7e" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 26 21:46:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 21:52:54 2026" }, "message": "Spanification of shim/allocator_shim_default_dispatch_to_partition_alloc.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ife8725bd3163241e381f110b48e320591101610d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7828614\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1686718}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 451f93fedef087e522c3545ba420b766843cf747\n" }, { "commit": "940e80830ad7b176f7b5ef129ca2683006fb4c7e", "tree": "3ada05a499cd3cd4cc37ecc0e5a71e8d79e63619", "parents": [ "335d95e22df3c488f57bec38cf22327076b3da28" ], "author": { "name": "Justin Cohen", "email": "justincohen@google.com", "time": "Wed Aug 26 15:53:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 16:02:13 2026" }, "message": "base: Remove CheckHeapIntegrity and CheckMetadataIntegrity\n\nThe last caller of base::CheckHeapIntegrity has been removed. This CL\nremoves base::CheckHeapIntegrity, base::allocator::CheckHeapIntegrity,\nand partition_alloc::PartitionRoot::CheckMetadataIntegrity.\n\nStatic analysis of callers of corrupted memory proved to be a more\neffective approach for debugging `free()` issues.\n\nBug: None\nChange-Id: Ic707fe5488b6cca7c4aad587e0426fd90e18689f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276173\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nCommit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686428}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f4220d71a741e49ff44f5f6d6ce3a9c612538c52\n" }, { "commit": "335d95e22df3c488f57bec38cf22327076b3da28", "tree": "58ae49917aea620aa08cf8e67505a06938375bde", "parents": [ "bda1ae135a6d92ebe80646334c275865f0cba60b" ], "author": { "name": "Gregg Tavares", "email": "gman@google.com", "time": "Tue Aug 25 08:16:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 08:20:19 2026" }, "message": "PAlloc: Use less space for power-of-2 sized AlignedAlloc.\n\nBefore this change, when working with AlignedAlloc we will\nrounded up to the next power of two, this sadly had a bad\nconsequence when the size itself is a power of two. Given\nthat in most Partitions PartitionAlloc has to store the\ninline metadata as well, this will make the size be just\never so slightly larger than a power of two, and then we\u0027d\nwaste basically double the requested size.\n\nThis CL fixes it to just round up to the alignment size\nafter adding space for the metadata.\n\nNote: There was a comment to the effect of:\n\n// PartitionAlloc only guarantees alignment for power-of-two\n// sized allocations.\n\nThat comment was a little off. Within a bucket, every allocation is\naligned to that bucket\u0027s slot size.\n\nBug: 491627887\nChange-Id: I250bf9eb645717eccf98db15d37f0a206a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8273137\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Gregg Tavares \u003cgman@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685354}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d44365c54646dfab8693c578e9ac435bf807b8d4\n" }, { "commit": "bda1ae135a6d92ebe80646334c275865f0cba60b", "tree": "a53bc295bf5f90619277ab1552eb065828e15720", "parents": [ "0e3ace2c8ef1de7744471ee348e9e8d261671842" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Aug 25 07:31:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 07:37:04 2026" }, "message": "PA: Mark `GetSlotUsableSize()` `const`\n\nAlso, move the two-argument version closer to the one-argument version,\njust to make it more obvious they are both implemented in\n`partition_root_internal.h`.\n\nChange-Id: I825fd0d019117f8896952414ca0e4ed5cf61e267\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8282557\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685306}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2c82d0992ff313afaafaec8d1a3b6f1447b223f5\n" }, { "commit": "0e3ace2c8ef1de7744471ee348e9e8d261671842", "tree": "74c2a5add89747520228bdf25f2e14cbfa599162", "parents": [ "2f810de7fd542c8b19cce6f0eab6b87996ba005e" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Mon Aug 24 15:34:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 15:39:45 2026" }, "message": "[PA] Add support for operator new(std::align_val_t, std::nothrow)\n\nPartitionAlloc previously routed operator new with alignment and\nstd::nothrow to ShimCppAlignedNew, which invoked alloc_aligned_function\nand entered the new handler loop on OOM rather than returning nullptr.\n\nThis adds alloc_aligned_unchecked_function to AllocatorDispatch and\nroutes nothrow aligned new calls to ShimCppAlignedNewNoThrow, returning\nnullptr on allocation failure. It also ensures AlignedAlloc handles\nexcessive allocation sizes gracefully on 32-bit platforms.\n\nFixed: 507484971\nChange-Id: I24b89326e6435c2491a9235d97f37476ce1e9e3b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8265210\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684779}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1f31d1914426758a4625585a419ce0064aece98d\n" }, { "commit": "2f810de7fd542c8b19cce6f0eab6b87996ba005e", "tree": "87c3991e77683a6ff84a377afa5e2261d2de4bcc", "parents": [ "df5fc1b01c7e81ed1396ea140b9ff07e6eb90536" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Aug 24 13:00:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 13:06:53 2026" }, "message": "PA: Directly call `GetRawSize()`\n\nIn `PartitionPurgeSlotSpan()`, we can call `GetRawSize()` rather than\n`GetUtilizedSlotSize()`, conditioned on the slot span having the raw\nsize available.\n\nChange-Id: I54e73cc52390f3a953ddcc72468a72640e72fbd4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8277509\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684709}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d49a3af581d7f4107fb13b5d97d188f8df4156a2\n" }, { "commit": "df5fc1b01c7e81ed1396ea140b9ff07e6eb90536", "tree": "d53f4d6d168dca2277e054fff0acf0e8c835dfb0", "parents": [ "7dbf24ac4ecfb1c687d95e17e61f32191af1f000" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Aug 24 08:23:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 08:27:56 2026" }, "message": "PA: Include buildflags header\n\nIWYU per the style guide. `PA_BUILDFLAG()` requires\n`partition_alloc/buildflags.h`.\n\nChange-Id: I11d1fbb519105166d93697e7c3e2d977eda84079\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8276949\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1684629}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b74f446be6bc7003ba70df4fc48f703dcf0b51cf\n" }, { "commit": "7dbf24ac4ecfb1c687d95e17e61f32191af1f000", "tree": "16b41004d50553d5df65e309959df01fed1d03cc", "parents": [ "ac51e08318fccba87b45ec7b0c2382309640c904" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Aug 21 16:01:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 16:06:09 2026" }, "message": "Remove UNSAFE_TODO from partition_alloc/scheduler_loop_quarantine_support.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ideb834e06b6b8ed5ac6d9e35e04c2fcadab1114b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834102\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683937}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6a031af089b9692f4e616d81ba42b1e1d408fd67\n" }, { "commit": "ac51e08318fccba87b45ec7b0c2382309640c904", "tree": "49ab51a648bac970882fdb93fa2cdb287b6f3b67", "parents": [ "f37e5dd97cd38300877ad1b53933417fb4682fb8" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Fri Aug 21 14:21:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 14:26:38 2026" }, "message": "remove UNSAFE_TODOs from partition_alloc/partition_root.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I839fd0af91a0ba601ccf13d4a3b206f274afa0e4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833803\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683884}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2ab8c8090931ee114af1bac6ac3f4804a3f0b6e4\n" }, { "commit": "f37e5dd97cd38300877ad1b53933417fb4682fb8", "tree": "3ee37950acb9ebc4dc4602c41dc2d9457a15ebb2", "parents": [ "087e4c38b0e7e129a033559f5de82c619fd8dc60" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Fri Aug 21 07:25:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 07:31:41 2026" }, "message": "[PA] Switch AllocToken ABI from Fast ABI to non-Fast ABI\n\nCurrently, AllocToken uses Fast ABI, which embeds the token ID directly\ninto the allocation function names (e.g., `__alloc_token_0_malloc`).\nThis approach is efficient while the number of AllocTokens is small\n(currently fixed at 2).\n\nHowever, in upcoming work, we plan to scale the number of AllocTokens up\nto 2^32 - 1 to leverage AllocToken for smart sampling (e.g.,\nGWP-ASan) and for zapped memory to enhance post-crash debuggability. When scaling up the number of AllocTokens, embedding IDs into function\nnames would lead to severe binary size expansion. Passing the ID as a\nfunction argument (non-Fast ABI) is more scalable.\n\nThis CL switches the AllocToken ABI from Fast ABI to non-Fast ABI by\nupdating the build flags, symbol entry points, and linker map\nconfigurations.\n\nChange-Id: Ie72d8bd8aa2fbed4b67b3846b4d92cc461e5b895\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257195\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683729}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4cbbbd07dd4a48518181e3ea640cb63a3fc7518c\n" }, { "commit": "087e4c38b0e7e129a033559f5de82c619fd8dc60", "tree": "01b4aea898398998d84a2506c7d1b9e7f5e05a25", "parents": [ "584ccf1ce5c6b7bb78378d9bf2962a389db0413d" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Fri Aug 21 07:16:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 21 07:21:16 2026" }, "message": "[PA] Zap intended leaks even without a type id hint\n\nIn FreeNoHooksImmediateInternal, hoist the zap logic out of the\nkWithTypeIdHint branch so that Free\u003ckIntendedLeak\u003e sanitizes the\npayload even when no type ID hint is passed by using\nkIntendedLeakUnknownTypeId.\n\nThis is necessary for RuntimeTargetedHardening where deallocations happen\nthrough ordinary free() without a known type ID hint at the free site,\nensuring retired slots are sanitized rather than left readable by\ndangling references. Existing callers (AMSC) always pass a hint and\nremain bit-identical in behavior.\n\nBug: 546295511\nChange-Id: Ib2b5769998fddb729ae04aec99e842ef7304fc44\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256689\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1683725}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5e3372305c54756cb103ad016ba4ba9378446508\n" }, { "commit": "584ccf1ce5c6b7bb78378d9bf2962a389db0413d", "tree": "cdc6f9d56fb070270ba71999a08b56d7330640f3", "parents": [ "a80690fa5b8b7db617c2d7b3b3b4ea317998ada4" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 20:27:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 20:30:51 2026" }, "message": "Spanification of shim/allocator_shim_default_dispatch_to_partition_alloc.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I2d96621a653fd4e7ce0e78713e2b065b193c6808\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834107\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683393}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 54efe34a91f379fd1c85a676f69aaf26545ad717\n" }, { "commit": "a80690fa5b8b7db617c2d7b3b3b4ea317998ada4", "tree": "b002f5b6ff70dd497d5cf8096016ac00cdd3b4f1", "parents": [ "4abc0f4113903fbff2176c2367c9c0ea76166c2c" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 11:51:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 11:56:31 2026" }, "message": "Spanification of partition_alloc/thread_cache_unittest.cc\n\nThis is the result of running the automatic spanification on linux\nand updating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I199570689a9bedee4d0a0e5b2a7abf968c5758c3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834103\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683044}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e3a262268c5a63cdff4ef7ec2ba8a3adcfe067fe\n" }, { "commit": "4abc0f4113903fbff2176c2367c9c0ea76166c2c", "tree": "62a69b7194f7c18c072c4295ea910bec9462461b", "parents": [ "b40bacc8b09953dc7a59a708251f214c6ab9eacb" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Aug 20 11:38:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 20 11:43:17 2026" }, "message": "Spanification of partition_alloc/thread_cache.cc etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I035fd45f9bf187840df957823ef8658d0ed1f45e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833827\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1683038}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dec4fbcb823940c41e44ae993d2cd69ec44246c8\n" }, { "commit": "b40bacc8b09953dc7a59a708251f214c6ab9eacb", "tree": "0ab3878b6bc8315661707cfa0716d9e4a4c860d7", "parents": [ "552529c4cee711d3e72841bda206e1b5e63f4cb4" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 19 15:56:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 16:00:50 2026" }, "message": "Spanification of partition_alloc/internal/thread_cache_internal.h, etc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I2bcbf6217d7fc0d8491f8a19f3746f3828405aa4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7832915\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682358}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a9fa5d69192a8576ddaaa4a6096c4e8c6f12a74f\n" }, { "commit": "552529c4cee711d3e72841bda206e1b5e63f4cb4", "tree": "4dbe752fe4c00288c3b7b9e6738d17aa83ac7cab", "parents": [ "5026491d64b68dfcba9e77333aa37a90804b76d9" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 19 15:36:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 15:40:28 2026" }, "message": "Spanification of partition_alloc/partition_alloc_base/rand_util_pa_unittest.cc\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: I73f849b0fd979dd48d7b714ea9a441880741c974\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7833739\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682336}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2671309d388796e98740a7c06ad28062a74b3534\n" }, { "commit": "5026491d64b68dfcba9e77333aa37a90804b76d9", "tree": "b604bf123a2d0de24b88781c10a6e5b431baa502", "parents": [ "85f6a439e6760020f6460d237ec4771467ff3ebd" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Aug 19 15:35:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 15:39:40 2026" }, "message": "Spanification of partition_alloc/address_space_randomization_unittest.cc\n\nThis is the result of running the automatic spanification on linux\nand updating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli and at last manually refined\n\nGemini-CLI auto-fixes for compilation\n\nBug: 505042664\nChange-Id: Ic30f2e7b0b26a134d282e369cd40605df36ba47c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7834110\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1682335}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 14dfa1988a21fd39ddb77e15328f0c97f2125472\n" }, { "commit": "85f6a439e6760020f6460d237ec4771467ff3ebd", "tree": "6d555585d5d2807f2cba17e92979ee2e86fede32", "parents": [ "89acd0d35ed7fb10563f4e8c70b4a37de2254d16" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Wed Aug 19 08:34:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 08:40:33 2026" }, "message": "Reserve a bit in `InSlotMetadata`\n\nThis CL supports Checked Span by reserving a bit in `InSlotMetadata` to\ndenote whether or not the original requested size (~3 bytes) is present\nat the end of the slot (before `InSlotMetadata`).\n\nThis bit currently serves no purpose. This CL should be reverted if we\nsee crashes from MiraclePtr refcount overflow, i.e. if the `PA_CHECK()`\nin `Acquire()` fires (implying that somebody is minting [(1 \u003c\u003c 29) - 1]\n\u003d\u003d 536 million `raw_ptr`s somewhere).\n\nBug: 534387022\nChange-Id: I2973514562d1b443bce3705622b698be7ce7a875\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8084483\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682114}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6ecbfb07b8f5b88aaa4b84429683ae42d34dfab8\n" }, { "commit": "89acd0d35ed7fb10563f4e8c70b4a37de2254d16", "tree": "d9a72e52611deafe84001a83b8a8e190ca9f3e65", "parents": [ "68b7f622cd9a30b2b3d77b42a9cd50abf655e142" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Wed Aug 19 06:50:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 07:00:10 2026" }, "message": "[PA] Move the intended-leak root into the allocator shim\n\nExpose an IntendedLeakAllocator() accessor from the PartitionAlloc\nallocator shim and from advanced memory safety checks.\n\n- Provides IntendedLeakAllocator() in allocator_shim_default_dispatch_to_partition_alloc.{h,cc} and in advanced_memory_safety_checks.cc.\n- Adds test coverage in AllocatorShimTest.IntendedLeakAllocator verifying that the intended leak root differs from the general-purpose malloc roots.\n\nBug: 546295511\nChange-Id: I553e256bd9b8040bf30e7d3dc896b2d256fd4903\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8255630\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682073}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bf969a22f49ad6ec33abb62410e24b9191f51687\n" }, { "commit": "68b7f622cd9a30b2b3d77b42a9cd50abf655e142", "tree": "df5d95036942bea48b9239e6c5028c8afc3f498c", "parents": [ "d7ac857e4dc69857f9ef21a32096950c09518aa6" ], "author": { "name": "Xiaobin Cui", "email": "xiaobincui@microsoft.com", "time": "Wed Aug 19 06:46:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 06:53:48 2026" }, "message": "Abort on Apple RNG failure instead of falling back to /dev/urandom\n\nOn macOS and iOS, getentropy() and CCRandomGenerateBytes() are\nguaranteed to succeed. The previous code treated failure as non-fatal\nand fell through to a /dev/urandom fallback—unnecessary on Apple\nplatforms and inconsistent with BoringSSL\u0027s approach of aborting\nimmediately on RNG failure.\n\nBug: 40641285\nChange-Id: I7f2477e1876cccf7354c877a8343222c77696dcc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8002136\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: David Benjamin \u003cdavidben@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1682068}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 315efe7d8b8208a89d4ef3f370ebdcb8c0e675e8\n" }, { "commit": "d7ac857e4dc69857f9ef21a32096950c09518aa6", "tree": "2365175d5eb950ef830b355b185d9a22c601ca23", "parents": [ "8a0694988ddbf7fdc5d10b65c505095b41d499e3" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Tue Aug 18 10:31:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 18 10:36:20 2026" }, "message": "[MTE] Use random memory tagging unconditionally\n\nRandom memory tagging provides stronger security over deterministic tag\nincrementing by preventing predictable tag reuse.\n\nMake random memory tagging the only mode in PartitionAlloc and remove\nthe unused RetagMode feature param and PartitionOptions toggle.\n\nBug: 548247754\nChange-Id: I71756092f508a06ccaa6297b0bfbd0069420862a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8256793\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1681245}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 38a70bb651010c10b60c1ff42323c79214e35df9\n" }, { "commit": "8a0694988ddbf7fdc5d10b65c505095b41d499e3", "tree": "a4ef59432c5dff19c5425dd6db40ed530e1111fd", "parents": [ "0ee1bd8ebd8af732537e0c0ed851a6794ce0f961" ], "author": { "name": "ainozaki", "email": "ainozaki@google.com", "time": "Tue Aug 18 00:32:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 18 00:43:21 2026" }, "message": "[PA] Clean up PartitionAllocFreeWithSize base::Feature flags\n\nThis CL cleans up the `PartitionAllocFreeWithSize` and\n`PartitionAllocStrictFreeSizeCheck` base::Feature flags.\n\nFixed: 410190984,495493036\n\nChange-Id: Ie89b4813d02a26e70404c7661c77ed91f097f306\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8200906\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Ai Nozaki \u003cainozaki@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1680943}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4b0adad50c7fd23bd0f86ea85d9b6e730a38b7ff\n" }, { "commit": "0ee1bd8ebd8af732537e0c0ed851a6794ce0f961", "tree": "7275551d887201ddc79e4272009fc76e30c94748", "parents": [ "9a83f672059100d72f43e791c36c2839069bf1ff" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Mon Aug 17 09:35:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 17 09:40:05 2026" }, "message": "Configure platform-specific defaults for PartitionAllocSchedulerLoopQuarantine.\n\nThis change splits the default configuration for\nkPartitionAllocSchedulerLoopQuarantineConfig based on the platform.\n\nLinux, macOS, and Windows retain the existing configuration targeting\nthe browser main thread.\n\nThe other platforms are still going through launch review, enabling them\nwas a mistake that slipped through.\n\nChange-Id: I09a3679f0c7cacc587013ae9eda663d21256888c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8260887\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1680417}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b6577cf10fcbb597908e441c1382beb76c6b20fa\n" }, { "commit": "9a83f672059100d72f43e791c36c2839069bf1ff", "tree": "9e256e401cfffd4d91112e51104377648c029937", "parents": [ "03cc513177b4340bee3dbfd46f6dd5fdded43b79" ], "author": { "name": "Nico Weber", "email": "thakis@chromium.org", "time": "Fri Aug 14 02:40:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 14 02:45:38 2026" }, "message": "base: Remove a few UNSAFE_TODO by converting to for-each loops\n\nPatch generated by running clang-tidy\u0027s modernize-loop-convert\non base/ and manually updating tweaked lines.\n\nNo intended behavior change.\n\nBug: 539052050\nChange-Id: I5d3f3d6a01373c59609a2ff0635764678f71e5fd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8252389\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Nico Weber \u003cthakis@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1679299}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 62d529088f594f99d7e3e2d27b20b6b4c1c80d77\n" }, { "commit": "03cc513177b4340bee3dbfd46f6dd5fdded43b79", "tree": "fbbe7017a304ed0b535213d705ca212f9c9a2018", "parents": [ "7d6a15841642fa6b02874e3c461e332f17c7c33d" ], "author": { "name": "Gregg Tavares", "email": "gman@chromium.org", "time": "Wed Aug 12 02:35:13 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 12 02:42:29 2026" }, "message": "Fix ScopedSchedulerLoopQuarantineExclusion\n\nScopedSchedulerLoopQuarantineExclusion was\nexiting on the first invalid thread cache\ninstead of handling all of them.\n\nBug: 538701265\nChange-Id: I02faae787eb139af9b57679652e0cfc26a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145820\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Gregg Tavares \u003cgman@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1677716}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 684217bd0672571af585e80822a44b860f06a65c\n" }, { "commit": "7d6a15841642fa6b02874e3c461e332f17c7c33d", "tree": "c55013bfdf9350a84b33205cfb4505b0663d4e1d", "parents": [ "f51f0758dbbcaaca9161bbe1f13ae0cf48130418" ], "author": { "name": "Gregg Tavares", "email": "gman@google.com", "time": "Mon Aug 10 09:46:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 10 09:49:59 2026" }, "message": "Move ScopedSafetyChecksExclusion to PartitionAlloc\n\nIt was in base. Moving it to PartitionAlloc will make it more\neasily accessible to Skia so we can add exclusions for\nMiracleObject in hot spots in Skia.\n\nBug: 543719238\nChange-Id: Ied60ad8c9e289071867173ab9a70f0226a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8221267\nCommit-Queue: Greg Thompson \u003cgrt@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Gregg Tavares \u003cgman@chromium.org\u003e\nReviewed-by: Greg Thompson \u003cgrt@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1676321}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5f38af1c1170b0378bc56d7aff23007b3293c3c0\n" }, { "commit": "f51f0758dbbcaaca9161bbe1f13ae0cf48130418", "tree": "7ff38384a045d62c8151261da06540dea7966a5b", "parents": [ "601b19e8a41fba2b7d63b1af108ffa6e6bc565c6" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Fri Aug 07 09:34:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 07 09:37:01 2026" }, "message": "PartitionAlloc: Track wasted size from rounding for AlignedAlloc.\n\nCurrently when working with AlignedAlloc we will round up to the next\npower of two, this has sadly a bad consequence when the size itself is a\npower of two. Given that in most Partitions PartitionAlloc has to store\nthe inline metadata as well this will make the size be just ever so\nslightly larger than a power of two, and then we\u0027ll waste basically\ndouble the requested size.\n\nThis CL doesn\u0027t fix it (fix coming in follow up cl), but rather just\ntracks the opportunity cost so that we can compare how big of a chance\nthis is for memory savings.\n\nBug: 491627887\nChange-Id: Ia36785627b6fc9e4c51c92e31fa76b7ca271f3a9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8152860\nReviewed-by: Joe Mason \u003cjoenotcharles@google.com\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1675596}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8a291f3c407194c1171229007964afcbd61d1491\n" }, { "commit": "601b19e8a41fba2b7d63b1af108ffa6e6bc565c6", "tree": "0f30ec4b0eb4d692ad2791c7a26f48117c6e72dc", "parents": [ "b5214a8a59875915c19701b4aa004f9034be7830" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Aug 07 04:42:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 07 04:45:19 2026" }, "message": "PA: Remove `MaxDirectMapped()`\n\nThis is now simply `MaxAllocationSize()`.\n\nFixed: 542850291\nChange-Id: I372cd67d49ae7d8a3a6bc5874ac0f4c36c5762ea\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8221322\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1675499}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d9b2b4c43b0c08a78d8cc1a7b7ea945ebf88f689\n" }, { "commit": "b5214a8a59875915c19701b4aa004f9034be7830", "tree": "ae3a32a13af5556a7ee7d797e2ea86a87a255d38", "parents": [ "4e780d3a98a6a80604e16574b1e5eba37efcf1f5" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 06 06:43:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 06 06:46:14 2026" }, "message": "PA: Remove `Settings::in_slot_metadata_size`\n\nThis is now unused. (Refer to https://crrev.com/c/5331170) for a\nhistorical snapshot of its former usage.)\n\nChange-Id: I98b7addd10b01ba40826f6c54f3010a7889a343a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8211459\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1674753}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f26cba06733c46e0f15ee560f3845370f027cf4a\n" }, { "commit": "4e780d3a98a6a80604e16574b1e5eba37efcf1f5", "tree": "d447cf0771343adbb540a54bbdc7e071b61cf7e4", "parents": [ "41619fc880dd2b9da16d9af345b64bb6ffe87540" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Aug 06 05:43:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 06 05:47:48 2026" }, "message": "PA: Add `MaxAllocationSize()`\n\nto be less domain-specific than `MaxDirectMapped()`. This is placed\ndirectly in the public `partition_alloc` namespace.\n\nCLs following this one will migrate external users to use the public\nspelling.\n\nThis CL was generated by Jetski and touched up by hand.\n\nBug: 542850291\nChange-Id: I737afb33780d7cacc418ffdd57a8772678f99510\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8200046\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1674733}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8348f7385c58ae4985f8e0fa9b5a600419f5083f\n" }, { "commit": "41619fc880dd2b9da16d9af345b64bb6ffe87540", "tree": "1e7007ffcec8e0daa9bbeb10cefa9cac7b301830", "parents": [ "f13ab1ccec3822713e5f98f0aa056d7739e9213e" ], "author": { "name": "Chris Davis", "email": "chrdavis@microsoft.com", "time": "Wed Aug 05 20:19:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 05 20:22:41 2026" }, "message": "[PartitionAlloc] Adapt periodic reclaim interval to reclaimable memory\n\nThe memory reclaimer wakes on a fixed cadence regardless of how much\nthere is to reclaim, so a mostly idle process keeps paying for wake-ups\nthat free almost nothing. This adds an opt-in back-off: the interval\ndoubles toward a maximum while there is little decommittable memory and\nhalves back toward a minimum once there is a lot, mirroring the adaptive\nscheme ThreadCacheRegistry::RunPeriodicPurge() already uses.\n\nThe signal is the total memory held in empty slot spans, which is\nexactly what PurgeFlags::kDecommitEmptySlotSpans reclaims. Each root\nalready tracks that incrementally, so the new\nPartitionRoot::get_empty_slot_spans_dirty_bytes() reads it in O(1)\ninstead of walking every slot span via DumpStats().\n\nThe policy is gated behind the new\nkPartitionAllocAdaptiveMemoryReclaimInterval feature, disabled by\ndefault, with the bounds and the watermark exposed as field trial\nparams. While the feature is off, Reclaim() does no extra work and\nMemoryReclaimerSupport::GetInterval() behaves exactly as before; the\nexisting kPartitionAllocMemoryReclaimerInterval override still takes\nprecedence when set.\n\nMeasured on Windows x64 with an idle five-tab workload, counting reclaim\nwake-ups over a 300s steady-state window per process, three interleaved\nruns per threshold:\n\n threshold Browser GPU Storage Audio TOTAL vs fixed-4s\n fixed-4s 75.0 75.0 75.0 75.0 300.0 -\n 20KB 24.7 9.0 11.3 7.3 52.3 -83%\n 100KB 15.7 8.0 10.3 7.0 41.0 -86%\n 200KB 16.3 8.0 9.0 7.0 40.3 -87%\n\nWake-ups drop by 86% at the 100KB default. The cost is a larger decommit\nbatch per reclaim: the browser process averages 974KB per fire at 100KB\nversus 242KB on the fixed 4s cadence, so the watermark trades batch size\nfor wake-ups and is left as a field trial param for tuning. 200KB is not\ndistinguishable from 100KB in this data (means differ by 0.7 wakes\nagainst a standard deviation of ~3), so the less aggressive of the two\nis used as the default.\n\nAlmost all of the tuning sensitivity is in the browser process. The\nhelper processes stay below even the smallest watermark nearly all the\ntime and ramp straight to the 60s cap regardless of the threshold, while\nthe browser process spans 12.0s to 20.3s mean interval across the sweep.\n\nNote for configuring the field trial: leave the interval param of\nPartitionAllocMemoryReclaimer unset. GetInterval() consults it first and\nreturns early when it is positive, so a study that pins interval\ndisables this feature entirely while still appearing to be enabled.\n\nBug: 40273855\nChange-Id: I24fc18ba8de5b057be75166147871027d0f0421e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8160268\nCommit-Queue: Chris Davis \u003cchrdavis@microsoft.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1674439}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3036171dc0dcb8bd50badaf54c5a329755b9ca46\n" }, { "commit": "f13ab1ccec3822713e5f98f0aa056d7739e9213e", "tree": "1c795a8e12a80228bde3b9512462cf8f82dde63f", "parents": [ "3a5c0cf1898cbfb3e33bf44a0a98c18002b00c7d" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Wed Aug 05 08:11:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 05 08:15:11 2026" }, "message": "PA: Check brp_enabled()-root or not before accessing metadata.\n\ncrrev.com/c/8135145 makes sanitized objects quarantined as miracle\nobjects, but the CL uses metadata without brp_enabled() check. If\nbrp_enabled() returns false, metadata are not available and it will\ncause crashes.\n\nBug: 541425545\nChange-Id: I2dc742de26a5c770d1827f8d7b4bbaf27be442be\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8199704\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1673960}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 930889460333b52c4ec7878f24123067a080e7fc\n" }, { "commit": "3a5c0cf1898cbfb3e33bf44a0a98c18002b00c7d", "tree": "0b2fdc98974895c80870b521dba6e8d5a43d16c9", "parents": [ "a3f1f24ec82192c02d2a112cc5fc5529b54407a0" ], "author": { "name": "David Bienvenu", "email": "davidbienvenu@chromium.org", "time": "Tue Aug 04 14:43:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 04 14:46:39 2026" }, "message": "Fix partition alloc test failures\n\nRemove ThreadCache tombstone between tests so that global state changes\nin one test don\u0027t break other tests in the same process.\nAlternateTestParams/PartitionAllocTest.MultipleThreadCachePerThread/1 in\nparticular fails in first run and succeeds on retry.\n\nChange-Id: Ib771d976d9bfe6e226699d5340e5bb2fcf130043\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8184868\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: David Bienvenu \u003cdavidbienvenu@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1673331}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: df3f856e8b2365697d0ef06ee1df45eeed689df5\n" }, { "commit": "a3f1f24ec82192c02d2a112cc5fc5529b54407a0", "tree": "45360f6686e99d6e7877a4470f0443aa66cf5adb", "parents": [ "34ad87ad7db364e5a76da6027002f88fce249dc9" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Aug 04 04:09:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 04 04:13:55 2026" }, "message": "PA: Update requested sizes on realloc\n\nIf we are to rely on the requested size for anything, these need to be\nkept up-to-date.\n\nFixed: 540914685\nChange-Id: I43e7e82b08ec0ee54d7affb796860c78c2d88488\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8184339\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1673086}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b2ad59662f521c6e2781ee7967b79fd775b88e90\n" }, { "commit": "34ad87ad7db364e5a76da6027002f88fce249dc9", "tree": "68fa7746327883e2c3ab96c51656f5954d83df8b", "parents": [ "29013c81d1fa46475bdf6608d71a10b5ebab3f48" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Aug 04 04:02:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 04 04:06:52 2026" }, "message": "PA: No-op rework for normal-bucket realloc\n\nWhen attempting to realloc inline in a normal bucket, we may want to\ntouch the `InSlotMetadata` even when the slot can\u0027t store the raw size.\nThis CL simply moves the variable outside the `if` gate so that this\nwill be possible in a future CL.\n\nThe compound condition (\"has BRP build support AND is DCHECK\") gets to\nbe a mouthful; some locally used `#define`s are introduced to make it\nless wordy.\n\nOne small behavioral change is made, manifesting the `InSlotMetadata` of\na normal-bucket slot unconditionally (no longer just when the slot can\nstore the raw size). This shouldn\u0027t be a huge problem, because it\nhappens either when\n\n1. the build has `DCHECK()`s enabled (not performance-sensitive) or\n2. the build will (in the future) manipulate the requested size stored\n in the `InSlotMetadata` unconditionally.\n\nBug: 540914685\nChange-Id: I7a8ebd31b5aaee9487984f8b5596804c9c59a054\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8184338\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1673081}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f3347af8d04eb0a5d50a4df0dbaed5b5d71127c4\n" }, { "commit": "29013c81d1fa46475bdf6608d71a10b5ebab3f48", "tree": "d3cce3aa1f5725c120d59e039e7ae5a83186a670", "parents": [ "ad56996fecb8731dec9d9137430b91b0906e8137" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Fri Jul 31 07:21:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jul 31 07:24:45 2026" }, "message": "[PartitionAlloc] Fix MTE retagging bypass in Scheduler-Loop Quarantine\n\nInitialize slot_size with BucketIndexLookup::GetBucketSize() prior to\ncalling RetagSlotIfNeeded() in PurgeInternal(). Previously, slot_size\nwas initialized to 0 at the top of the loop as a placeholder for later\naccounting, causing RetagSlotIfNeeded(ptr, 0) to abort early as a no-op\nwithout executing ARM Memory Tagging Extension (MTE) hardware retagging\ninstructions.\n\nConsequently, slots leaving Scheduler-Loop Quarantine returned to the\nfreelist or thread cache with their original pre-free MTE tags intact. A\ndangling pointer from before the free could access reallocated memory\nwithout triggering an MTE fault.\n\nBy calculating the true bucket size before invoking RetagSlotIfNeeded(),\npurged slots always receive a new MTE tag before being reused.\n\nAdd MTEProtectsFreedPtrViaSchedulerLoopQuarantine regression unit test\nunder HAS_MEMORY_TAGGING to verify tag inequality across reallocation.\n\nTAG\u003dagy CONV\u003d4a78b948-43d2-464e-9799-38644f4a90bf\n\nBug: 493201557\nChange-Id: I4438bf9d92487552f3a3eb0fa312e5e694f7c51f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8166380\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1671668}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f930ab45c50d18845c5133c58926dec04a205d82\n" }, { "commit": "ad56996fecb8731dec9d9137430b91b0906e8137", "tree": "58c40e7ed3a6b794e202f30e4d4d7930232280fa", "parents": [ "d7aeed15f395f59cf998dce0682e2b3a9ce938d3" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Thu Jul 30 18:49:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 30 18:53:09 2026" }, "message": "[PartitionAlloc] Order SetQuarantineRequest() before ReleaseFromAllocator()\n\nOrder SetQuarantineRequest() before calling ReleaseFromAllocator() in\nFreeNoHooksImmediateInternal(). Once ReleaseFromAllocator() is called,\nit clears kMemoryHeldByAllocatorBit on the InSlotMetadata ref count. If\na concurrent thread destroys the last raw_ptr pointing to the object at\nthat exact moment, it will invoke FreeAfterBRPQuarantine().\n\nWhen FreeAfterBRPQuarantine() is called on another thread before the\nquarantine bit is set, two critical problems occur:\n\n1. PopQuarantineRequest() returns false, which skips routing the\n slot to SchedulerLoopQuarantine().\n2. The slot is freed immediately via RawFreeWithThreadCache(), which\n calls RetagSlotIfNeeded() and updates the ARM Memory Tagging\n Extension (MTE) tag of the slot in RAM. When the freeing thread then\n attempts to execute SetQuarantineRequest(), accessing the pointer\n causes an MTE synchronous tag check fault (SEGV_MTESERR).\n\nSetting SetQuarantineRequest() prior to ReleaseFromAllocator() ensures\nthat FreeAfterBRPQuarantine() correctly identifies scheduler loop\nquarantine requests without race conditions or tag faults.\n\nTAG\u003dagy CONV\u003d4a78b948-43d2-464e-9799-38644f4a90bf\n\nChange-Id: Ic7a3abb55f5c049bad8e8149d888ec74e798b5c1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8161565\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1671288}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 53d532295ca94f0c77d542f65ffb2426290c6a4f\n" }, { "commit": "d7aeed15f395f59cf998dce0682e2b3a9ce938d3", "tree": "28e0827f6abfe2afb8d3b37139075d4e8806e9bc", "parents": [ "a134c160c51685329230b6323e4c8e3052cbf13d" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Thu Jul 30 06:54:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 30 06:59:03 2026" }, "message": "MiraclePtr: Add ReportIfDangling stub to RawPtrNoOpImpl\n\nWhen raw_ptr\u003cT, UnprotectedInRelease\u003e falls back to RawPtrNoOpImpl in\nnon-BRP release builds, binding the pointer via base::Unretained in\ncontexts where MayNotDangle is checked calls ptr.ReportIfDangling().\nRawPtrBackupRefImpl implements static void ReportIfDangling(T*), but\nRawPtrNoOpImpl lacked a corresponding no-op stub method, causing\ncompiler errors during callback binding.\n\nThis change adds an empty static ReportIfDangling stub to RawPtrNoOpImpl\nto ensure build compatibility across all pointer trait combinations.\n\nTAG\u003dagy\n\nBug: None\nChange-Id: Ib0fb153cf6b387b6456785792b85eea1830e4b77\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8172284\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1670869}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a92bc0620a782fc830ad01301a4b3046518bd9d7\n" }, { "commit": "a134c160c51685329230b6323e4c8e3052cbf13d", "tree": "2ac376f4157a87e1f0e55cd626d98feb1b3a5968", "parents": [ "f5fbe01c81eb627bb3ab48c0d3d70df6722e0014" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Jul 30 06:08:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 30 06:11:50 2026" }, "message": "Busybody: Don\u0027t depend on outside variables\n\nThis CL should be a no-op. PartitionAlloc tries to avoid outside (esp.\nChromium-specific) build dependencies in GN recipes. This CL adds the\nusual indirection to a few stragglers defined outside PartitionAlloc\u0027s\nsource directory.\n\nThis CL was mostly generated with Jetski and reined in by hand, to\nrestrict the change only to the most obvious cases. N.B. Jetski\u0027s\nanalysis appears wrong in places.\n\nChange-Id: I982901212846c27d8688ad8d20ea321bde6d0e92\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8161843\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1670847}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ed6af269c0e97f65fcff3d81775511cd96a56b2e\n" }, { "commit": "f5fbe01c81eb627bb3ab48c0d3d70df6722e0014", "tree": "59a768c57f62e87417cfd66d47bcdb6d9d1bead5", "parents": [ "6abc77b2ec9f16df21a84f47c0bce6e7ab984036" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Wed Jul 29 18:00:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 29 18:06:23 2026" }, "message": "partition_alloc: Expose less internal bits\n\nIn partition_alloc_constants.h, stop exposing internal bits that are not\nactually used externally. For usage within partition_alloc itself, use\nthe internal namespace.\n\nChange-Id: Idc918b070ff23ce183abb1dfbfd7957ae51c446a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8165745\nReviewed-by: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1670413}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 57b94443f3e50bbb329cad8902c60770efbef0bc\n" }, { "commit": "6abc77b2ec9f16df21a84f47c0bce6e7ab984036", "tree": "0481b18edb53e775572038fcc655b0f357dca6f9", "parents": [ "a7fbe3ea781cd19875dc35e12ba99b52838d974f" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Jul 28 23:37:55 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 28 23:41:19 2026" }, "message": "partition_alloc: Cleanup pre-C++20 code in compiler_specific.h\n\nNow that C++20 is widely available, just use __has_cpp_attribute(),\nconstinit and constexpr directly. Delete conditional defines that\nassumed these C++20 language features may not be available.\n\nNO_IFTTT\u003dNo behavior change.\n\nChange-Id: I39224abfc81ed726d606fe2e7dbe964fa4fdd012\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8162521\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1669861}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 953562c4e8dc407eab1fa0c374bc14e98ffda4c0\n" }, { "commit": "a7fbe3ea781cd19875dc35e12ba99b52838d974f", "tree": "31e0a860a282cb2cfdb353a85abb3825a4a115fa", "parents": [ "43b48ec3cef9bf69564014648634d924bd65bc01" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Jul 28 23:32:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 28 23:34:53 2026" }, "message": "partition_alloc: Switch kSameAsAny to a C++20 concept\n\nNow that C++20 is widely available, fulfill a TODO and sync PA\u0027s\nsame_as_any.h with the other copy in //base.\n\nBug: 344963951\nChange-Id: I3d2c935607bc80789389e6a154103024d1e84b87\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8162523\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1669858}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5d1b242829fc74ca5e9620f978c2185df437574b\n" }, { "commit": "43b48ec3cef9bf69564014648634d924bd65bc01", "tree": "b980cac7ed551b5b383cb662ce409ec8af2b393b", "parents": [ "6fb47fe744962fed36cfeab597d38123d6065b8d" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Tue Jul 28 06:51:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 28 06:55:06 2026" }, "message": "PA: quarantine sanitized objects as miracle objects after dequarantined\n\nThis is a short-term fix to make sanitized objects (i.e. objects with\nAMSC macro) not to skip miracle objects\u0027 protection.\n\nThis CL makes SchedulerLoopQuarantineBranch for sanitized objects use\nFreeNoHooksImmediateInternal() with FreeFlags::kSchedulerLoopQuarantine\ninstead of RawFreeLocked() and to give SchedulerLoopQuarantineBranch for\nmiracle objects a chance to quarantine the objects. This requires\n`usable_size` memory zapping (not `slot_size`). Because if\n`slot_size`-region is filled with kFreeByte, `InSlotMetadata` and\nPartition Cookie will be broken. It will cause\nInSlotMetadata::CheckCookieIfSupported() failure or\nPartitionCookieCheckValue() failure.\n\nBug: 501113274\nChange-Id: I7d39c389fef69dcef3bc43a8e4d9f1346ca486a1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8135145\nAuto-Submit: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1669248}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a8b58bf7017325d5d2dfe5a8c9d4813306298458\n" }, { "commit": "6fb47fe744962fed36cfeab597d38123d6065b8d", "tree": "82b732ea81fa30a77a88f377396d54e1a5e64503", "parents": [ "0f047f38aca8c1d8fcdb3dc2ff3899e5cd639d4a" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Jul 28 04:43:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 28 04:46:03 2026" }, "message": "partition_alloc: Simplify RotR()\n\nRemove the PA_NOTREACHED() usage.\n\nChange-Id: I476edb8e9cc89347bae353ee74bc4581f070a093\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145465\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1669201}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c4b9cee4a2bd176b039f47a63f461bf738e46264\n" }, { "commit": "0f047f38aca8c1d8fcdb3dc2ff3899e5cd639d4a", "tree": "d791262e284a1e7d8526e841cbfac50b66af7249", "parents": [ "7eeface2375da12c01f93242635f100942739403" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Tue Jul 28 00:18:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jul 28 00:21:28 2026" }, "message": "partition_alloc: Remove PA_HAVE_SPACESHIP_OPERATOR\n\nNow that C++20 is widely available, stop assuming the build may be\nmissing spaceship operator support.\n\nChange-Id: Id4fb7e33ac6ebc270a71c76505ec30b3803094eb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8157623\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1669103}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8c8aa482a9ef1dbd63e1490748708c09c163a0f9\n" }, { "commit": "7eeface2375da12c01f93242635f100942739403", "tree": "709dee6422610219c926d7b1d8d37a8c32f869f8", "parents": [ "64a11a4440a2b930c95e8bece059c54a861b79dc" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Mon Jul 27 22:31:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 27 22:34:36 2026" }, "message": "partition_alloc: Replace CountlZero() with std::countl_zero()\n\nNow that C++20 is widely available, switch to std::countl_zero().\n\nNO_IFTTT\u003dNo behavior change.\n\nChange-Id: Iab954ef3395fa95760af01b0e06c7111efce9718\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145464\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1669036}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4abd497b7185e1caa4116e70edb5037de4c79edb\n" }, { "commit": "64a11a4440a2b930c95e8bece059c54a861b79dc", "tree": "e2c6e8b1be8489a12b18f623e1ae7b6a998cf7f0", "parents": [ "09f2979b22bf8beaabb4a3fd15f4d1df1d0ff42a" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Mon Jul 27 20:00:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 27 20:05:59 2026" }, "message": "partition_alloc: Replace CountrZero() with std::countr_zero()\n\nNow that C++20 is widely available, switch to std::countr_zero().\n\nChange-Id: I2271933c8eea237da9c0e30e4a49a592602a3842\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145463\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1668909}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e9a046eeafe7cb4cdb33ee88805c2b96ad946083\n" }, { "commit": "09f2979b22bf8beaabb4a3fd15f4d1df1d0ff42a", "tree": "ece30efc9044160f3491dd4c69eb167140b1723d", "parents": [ "d0d87ed6b9047672b4e156952f82f874c5660016" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Mon Jul 27 19:59:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 27 20:03:06 2026" }, "message": "partition_alloc: Replace BitWidth() with std::bit_width()\n\nNow that C++20 is widely available, switch to std::bit_width().\n\nChange-Id: If2f2d2bb844e38f11871e58119ebbbb064b60175\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145462\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1668908}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1122e917453dbe19640871f4b86f7f9ee843ec96\n" }, { "commit": "d0d87ed6b9047672b4e156952f82f874c5660016", "tree": "4ebc600c8841695de4731a65eab5b92e65289774", "parents": [ "66df8ef636795eff70efc52a47d8f62612800054" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Mon Jul 27 19:59:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jul 27 20:02:28 2026" }, "message": "partition_alloc: Replace HasSingleBit() with std::has_single_bit()\n\nNow that C++20 is widely available, switch to std::has_single_bit().\n\nChange-Id: I3afd1c18f690b4dc0eeb0232fdcde622c35be933\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8145461\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1668907}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7cd8bbec4271d2fec6794acea4e6cc4712f7f3fb\n" } ], "next": "66df8ef636795eff70efc52a47d8f62612800054" }