)]}' { "log": [ { "commit": "344fbfe3d90ce8fb763e6e0dfbf992313999e80c", "tree": "4120e884e517e696af00f85f53ab9351c433f1fd", "parents": [ "e142dc393de44c75da02af7a689edcd827b6ff36" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri Jun 05 09:13:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jun 05 09:14:41 2026" }, "message": "Use _WIN32 instead of WIN32 in component_export.h\n\ncomponent_export.h was using defined(WIN32) to detect Windows for\ndllimport/dllexport. However, some embedders like Skia do not define\nWIN32 in their build configuration, whereas the compiler always defines\n_WIN32 on Windows.\n\nThis caused component builds of partition_alloc in Skia on Windows to\nfail to link (e.g. allocator_core.dll failing to link due to missing\nsymbols from allocator_base.dll) because symbols were not being\ncorrectly exported.\n\nUsing _WIN32 (which is predefined by the compiler) fixes this issue\nwithout requiring embedders to explicitly define WIN32.\n\nAlso update PRESUBMIT.py to remove WIN32 from ALLOWED_DEFINITIONS as\nit is no longer used, and update build_config.md documentation.\n\nChange-Id: I0f359790b8b57216eed6ec7098f8165c865a3142\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7902491\nReviewed-by: Yuki Shiino \u003cyukishiino@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Will Harris \u003cwfh@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1642222}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cfd45f42d4e68f36b3f06b811b2b3c4b3fabf09a\n" }, { "commit": "e142dc393de44c75da02af7a689edcd827b6ff36", "tree": "4c3b4dd734dde6b65d9f47ad7cdec49edf1d2cb0", "parents": [ "596194f25955e22ef520393e95e560b34c86d708" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri Jun 05 07:37:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jun 05 07:38:39 2026" }, "message": "PA: Enforce -Wnontrivial-memaccess and -Wnontrivial-memcall.\n\nAdd the `-Wnontrivial-memaccess` and `-Wnontrivial-memcall` compiler\nwarning flags to the extra warnings config enforced by PartitionAlloc.\nThese flags help catch unsafe raw memory operations on non-trivially\ncopyable types.\n\nThey will be enabled by default in new versions of Clang, and are\ncurrently causing a warning in Skia.\n\nBug: 518435517\nChange-Id: Ia99841390fba1fd3ed3a0815c6334c3dabfaf2b3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7889502\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1642186}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 639c74efb7bfe97fccf0c823abd5ac3355c40a3c\n" }, { "commit": "596194f25955e22ef520393e95e560b34c86d708", "tree": "d22058e842c274a1078cbe7f567cd20b9f567cac", "parents": [ "c8ffc7932a3d49c12346e14cf07fea5a1cf62396" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri Jun 05 03:24:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jun 05 03:26:36 2026" }, "message": "partition_alloc: fix outdated circular-dependency header guards\n\nRestore the safety circular-dependency check by updating it to use the\ncurrent correct header guards.\n\nThe old checks used outdated //base guards that were never defined since\nthe files moved to partition_alloc, making the check silently dead.\n\nThis is a follow-up of CL: https://crrev.com/c/7876007\n\nBug: 351867706\nChange-Id: I9f825ec87158114c42ddc7436bc3c337e8d3216f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7871104\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Yuki Shiino \u003cyukishiino@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1642115}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 733d65ee3ab3d82fcd227077e822fabd111e245e\n" }, { "commit": "c8ffc7932a3d49c12346e14cf07fea5a1cf62396", "tree": "963bacf32946e9708811c8b6f134f759569843f6", "parents": [ "5bc15a79ea9d0cd0bd144d5f93a78e52b1e73a5a" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Jun 04 12:13:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 04 12:15:10 2026" }, "message": "partition_alloc: Clean up warnings in standalone config.\n\nRemoves obsolete warning suppressions (`-Wno-return-type` and\n`-Wno-invalid-offsetof`) from the standalone build configuration, as\nthey are no longer needed. It also enables `-Werror` by default to\nensure the standalone build remains warning-free.\n\nBug: None\nChange-Id: I7083465224a94f12d6616adbfbf93f165d209d62\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7894083\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1641580}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b9bb2a8c34c4f03eb90064a1f5d773d67cf94f54\n" }, { "commit": "5bc15a79ea9d0cd0bd144d5f93a78e52b1e73a5a", "tree": "a6a95c303dd6239fbfddc226dbb050d12505ca79", "parents": [ "b8ae6c8036e4704170b4b0f872a4490f5b0e195a" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Jun 04 07:53:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 04 07:55:40 2026" }, "message": "partition-alloc: Define is_ubsan and is_tsan for standalone build\n\nThis is a no-op from Chrome CQ/CI/Releases point of view.\n\nThis change defines `is_ubsan` and `is_tsan` in the standalone\n`BUILDCONFIG.gn`. When building PartitionAlloc as standalone, these\nvariables are used by `partition_alloc.gni` to determine whether\n`use_checked_span` should be enabled, but they were previously undefined\nleading to GN errors.\n\nThis regressed in:\nhttps://chromium-review.googlesource.com/c/chromium/src/+/7673121\n\nSee this external CI:\nhttps://github.com/ArthurSonzogni/PartitionAllocTest\n\nI decided to manually update dependencies instead of reverting.\n\nChange-Id: Ic72f6c9606f455526c0ebfe3529b045a8a99c9f7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7894609\nReviewed-by: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1641512}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 769c8953630c6a99fcf168b21ca2392f5fdea048\n" }, { "commit": "b8ae6c8036e4704170b4b0f872a4490f5b0e195a", "tree": "f0a4cbe73fe9a2f5672339c66b1f75924e671db5", "parents": [ "40389bc17e7b30dc69cc95648cba8a4685fcefd2" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Thu Jun 04 05:48:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 04 05:51:43 2026" }, "message": "partition_alloc: Fix user space segment\n\nWhen reserving a gap fails, we free all reservations and return 0.\n\nInstead, we can just keep whatever we have and report a smaller\nsegment than we would have hoped for. This restores behavior to where\nit was before http://crrev.com/c/7885504. It is necessary to keep\nwhatever we can get for Mac which often is not able to reserve 1MB of\ntrailing memory after 4G but only a few KB. Few KB is enough for V8\nbut 0 is a failing condition.\n\nBug: 40925855\nChange-Id: I9a5da0309a00218605b6fad32ea9ce4ccf34401d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7900353\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1641478}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e8f80b985fb32e3e7e75b29bbb7f0d7eacabd6b2\n" }, { "commit": "40389bc17e7b30dc69cc95648cba8a4685fcefd2", "tree": "188819978f58e3a95dc0dc142aa677022d909876", "parents": [ "8f376b39bef2d414e81e609fda2ea255d6ee1862" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Wed Jun 03 10:29:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 03 10:31:27 2026" }, "message": "partition_alloc: Enable user space zero segment on ChromeOS\n\nAlso rework the BUILD.gn guard as it was assuming that is_chromeos and\nis_android also imply is_linux.\n\nBug: 40925855\nChange-Id: I54ef8877ad4b23451cfb794602101bb49c89f7d2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7895439\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1640819}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 464e04c991965585d088f7d1d201c8675d24e5e5\n" }, { "commit": "8f376b39bef2d414e81e609fda2ea255d6ee1862", "tree": "1ced8d6d307b0db7fecc2de0b9e1425cb806de68", "parents": [ "7ba9392e9d8d2d9355a85d09c2df6f227768aa66" ], "author": { "name": "Dominic Battre", "email": "battre@chromium.org", "time": "Wed Jun 03 07:17:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 03 07:19:05 2026" }, "message": "Fix TSan data race in PartitionRoot::AdjustSlotSpanRing\n\nMove the assignment of max_empty_slot_spans_dirty_bytes_shift_ inside\nthe partition root lock to synchronize it with reads in RegisterEmpty,\nfixing a runtime ThreadSanitizer warning.\n\nPreviously, AdjustSlotSpanRing (which is called when backgrounding a\nrenderer) modified max_empty_slot_spans_dirty_bytes_shift_ without\nholding the lock, while RegisterEmpty (called when V8 sweeps and frees\narray buffers on a background thread pool) read it under the lock.\n\nBug: 519061808\nChange-Id: I0837501773952c87342392b7dcb5d0196a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7894895\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Dominic Battré \u003cbattre@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1640745}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e562eafd0a1e695d49f498c804fe682d0c710909\n" }, { "commit": "7ba9392e9d8d2d9355a85d09c2df6f227768aa66", "tree": "0992273388c3e2c767863097f0a8fead89a0474c", "parents": [ "390c4b91f769aad03ea13d2a479d7430406302f2" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Wed Jun 03 06:43:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 03 06:46:51 2026" }, "message": "partition_alloc: Rework userspace zero segment and enable on Windows\n\nThe user space zero segment doesn\u0027t work out of the box on Windows\nbecause Windows maps other read-only regions within the first 4G of\naddress space.\n\nThis CL reworks the feature by extending GetZeroSegmentSizeFromOS()\ninto a more general GetWellKnownReadOnlyRegions(). The API returns\nnoaccess or read-only regions within the first 4G that are well known\n(via e.g. OS documentation). InitZeroSegment() then skips over such\nwell-known regions.\n\nThe CL also enables Windows to directly have a use for the regions.\n\nTAG\u003dAGY\n\nChange-Id: If3399580ee36836d229266f80c6b66551aa345ad\nBug: 40925855\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7885504\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Anton Bikineev \u003cbikineev@chromium.org\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1640734}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: df33502c9df0e81ece7af0aeca7d4adc2babed15\n" }, { "commit": "390c4b91f769aad03ea13d2a479d7430406302f2", "tree": "c51c1488dc404e4447a12cff03a2b298197eecdf", "parents": [ "ff3b8b885b8374cbd3902642d94dc737bda93d5d" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Mon Jun 01 10:02:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 10:04:07 2026" }, "message": "partition_alloc: fix OFFICIAL_BUILD legacy macro\n\nEnsure partition_alloc can build outside of Chromium by replacing the\nChromium-specific OFFICIAL_BUILD macro with a PartitionAlloc buildflag.\nDirectly depending on Chromium\u0027s build config macros breaks portability.\nReplacing them with PA buildflags ensures clean encapsulation.\n\nThis is a follow-up of CL: https://crrev.com/c/7876007\n\nRenamed IS_OFFICIAL_BUILD buildflag to\nOFFICIAL to avoid conflict with\n- OFFICIAL_BUILD (legacy //build define)\n- IS_OFFICIAL_BUILD (newer chrome define)\n\nTAG\u003dagy\nCONV\u003d217c94a9-c4fe-4a7b-8326-73e302e3a6a3\n\nBug: 351867706\nChange-Id: Ic2cdb5cfd87f1ba103b2c5f48abedb5ea419a771\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7871105\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1639251}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ba0119788810a4289559faa4844fac9b55a12d2f\n" }, { "commit": "ff3b8b885b8374cbd3902642d94dc737bda93d5d", "tree": "89bb7ef4a998b00e579155d82dc60064a12fe3f6", "parents": [ "e6c4d08c9badb8cef65d11f7f9dc1924f4d70027" ], "author": { "name": "yoshiki iguchi", "email": "yoshiki@google.com", "time": "Fri May 29 21:56:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 29 21:58:34 2026" }, "message": "Clean up: Fix 11 wrong escapes in 5 DEPS files in base\n\nAccording to the checkdeps doc, the period (.) should be escaped with\ntwo backslashes (\\\\), but sometimes it was done with one backslash (\\)\nwrongly.\n\nThis CL fixes these wrong escapes.\n\nSee the checkdeps doc for the detailed format:\nhttps://chromium.googlesource.com/chromium/src/+/master/buildtools/checkdeps/README.md\n\nBug: None\nTest: Passed CQ\nTest: Ran `/buildtools/checkdeps/checkdeps.py`\n\nChange-Id: I937bf7532fa54bbc7c38abd08f94a47311392906\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7883083\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCommit-Queue: Yoshiki IGUCHI \u003cyoshiki@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1638749}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e2ee5821963baed92f29e830f05d257fbfdc6bdd\n" }, { "commit": "e6c4d08c9badb8cef65d11f7f9dc1924f4d70027", "tree": "6bed5eced976580243629973c5f5efe7f192b0dd", "parents": [ "7c5bc8bed5343a287fe9a71ebc830df1ed2d7254" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri May 29 08:13:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 29 08:15:09 2026" }, "message": "partition_alloc: Add missing \u003ccstring\u003e includes for standalone builds\n\nAdd missing #include \u003ccstring\u003e to several files in partition_alloc that\nuse memcpy, memset, or strlen but do not explicitly include it.\n\nThese files rely on transitive includes, which causes build failures in\nstandalone configurations (such as when partition_alloc is embedded\ninside Skia and built standalone) where the headers are not transitively\nincluded.\n\nThis was discovered when building Skia standalone with partition_alloc\nenabled, which failed with the following error:\n\npartition_alloc/shim/\nallocator_shim_default_dispatch_to_partition_alloc.cc:342:20: error: use\nof undeclared identifier \u0027memcpy\u0027; did you mean \u0027wmemcpy\u0027?\n 342 | PA_UNSAFE_TODO(memcpy(new_ptr, address, copy_size));\n | ^~~~~~\n | wmemcpy\n\nTAG\u003dagy\nCONV\u003d3d82acbb-db8a-4c61-8cc4-393e9b99de0a\n\nBug: 351867706\nChange-Id: If7ec638c9c6aa80cb30be821564217194d50c72b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7882998\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1638301}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 825a07b131bc12c438c9482585243ccf47379940\n" }, { "commit": "7c5bc8bed5343a287fe9a71ebc830df1ed2d7254", "tree": "2d2c06b2ff921747ba543c58695a319e1709264d", "parents": [ "76c74af3a92809278b20d6816865a296d4704ca6" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Fri May 29 08:09:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 29 08:12:21 2026" }, "message": "partition_alloc: presubmit against external define\n\nAdd a presubmit checking what are the compiler definition\npartition_alloc depends on and maintain an allow-list of known one.\n\nThis ensures we don\u0027t introduce dependencies on chrome defines that\nwouldn\u0027t be available elsewhere (v8, skia, pdfium, dawn, etc...)\n\nThis is important, because new dependencies might fail silently.\n\nFollow-ups:\n- Outdated circular guards fix: https://crrev.com/c/7871104\n- OFFICIAL_BUILD macro fix: https://crrev.com/c/7871105\n- MEMORY_TOOL_REPLACES_ALLOCATOR macro fix: https://crrev.com/c/7871106\n\nTAG\u003dagy\nCONV\u003d743c2770-5566-427d-9c31-fe1b7beb69c1\n\nBug: 351867706\nChange-Id: I0934726b848d5062eaea2822a8d89fccc71d17cb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7876007\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1638295}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cc2428b615d25ecdd3b95e3216a5703cfdcbb611\n" }, { "commit": "76c74af3a92809278b20d6816865a296d4704ca6", "tree": "97c6ef6848fcf9e3be3278acf8b903135acbe68b", "parents": [ "0059a764097188d89c60b6d4bebff3b0e0726e40" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Fri May 29 06:54:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 29 06:56:05 2026" }, "message": "Introduce kUnprotectedInRelease raw_ptr trait\n\nIntroduce kUnprotectedInRelease trait so we can enable BRP for\nperformance sensitive raw_ptr only in DCHECK builds.\n\nChange-Id: Id30807356a4693a516657a30031304096ac1ba3b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7784830\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1638254}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2b43626492a002b92a563aeb5842cdd8a90e93be\n" }, { "commit": "0059a764097188d89c60b6d4bebff3b0e0726e40", "tree": "5d62d6f5b88428e09db40c9377758762850a8c52", "parents": [ "6be374aead819a4516bc0e4e9fcf4bbdfcd6d956" ], "author": { "name": "Keishi Hattori", "email": "keishi@google.com", "time": "Thu May 28 08:16:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 28 08:19:56 2026" }, "message": "base: Introduce ReallocProtectedIterator to mitigate container realloc UAF\n\nIntroduce ReallocProtectedIterator which can be used to quickly mitigate\na realloc while iterating uaf issue.\n\nDesign doc: https://docs.google.com/document/d/1-2iFnFFG1pcD-Pua-RVratKTKVwInE51K5EH1VHzDBo/edit?usp\u003dsharing\u0026resourcekey\u003d0-DaaCDwk3xL6VQed2NNN4ow\n\nBug: 501112189\nChange-Id: I334564d9455ccc517e6a3dd128419efe2114b0e5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7843993\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1637537}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 38c09cd6f1148dc6438dfdcda9ae1f59a8f2f481\n" }, { "commit": "6be374aead819a4516bc0e4e9fcf4bbdfcd6d956", "tree": "22e7ba3f3202c5319185d667b93183ad596956df", "parents": [ "a39cb77b46d546764df8479920c9ee556bcfd750" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Wed May 27 08:38:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 27 08:40:11 2026" }, "message": "PA: Add public PartitionRoot::GetRootFromAddress() method\n\nTo remove //nogncheck from safety_checks_unittest.cc, add NOINLINE\npublic method, GetRootFromAddress() to PartitionRoot.\nAlso fixed typo: `Scurity` should be `Security`.\n\nChange-Id: I59252b3e0d951e072c34b2817335313ed8fa6bdc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7854166\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1636754}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6095c5b4e797cd66b665b9291ff8f0fdb4d568c7\n" }, { "commit": "a39cb77b46d546764df8479920c9ee556bcfd750", "tree": "f4da2e9c41bf00e64096eac99526aaa43115b7dd", "parents": [ "58bfcaec0f5ca337379e269dfe7a2400b650fbdc" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Wed May 27 08:21:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 27 08:23:25 2026" }, "message": "[PA/MO] Support flexible configuration of TaskAnnotator purge\n\n- Replace feature flag kPartitionAllocSchedulerLoopQuarantineTaskControlledPurge\n with enable_task_controlled_purge parameter in SchedulerLoopQuarantineConfig.\n- Implement in-between tasks exclusion (pausing quarantine when idle)\n controlled by pause_in_between_tasks parameter.\n- Fix bug where reconfiguring inside a task corrupted pause count.\n- Fix bug where config change inside a task broke Disallow/Allow balance.\n\nTAG\u003dagy\nCONV\u003d958945a5-4b47-4611-afe0-c9f4fbee0c41\n\nBug: 329027914\nChange-Id: I89ec6ce00cff8eac94b4ea3a7989d7b819fab353\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7862572\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1636752}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f2065f4c8faaf3fd2c7ccadbcb01f9d925b52d99\n" }, { "commit": "58bfcaec0f5ca337379e269dfe7a2400b650fbdc", "tree": "fd091b0dabcc7ac10519725c5ac912fe434818b4", "parents": [ "3842bcc38cf3d73470ca8c223ac0db19d81e29fe" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Wed May 27 02:05:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 27 02:07:16 2026" }, "message": "PA: Replace FreeWithSize() with Free() with FreeFlags::kWithSizeHint.\n\nAdd template struct FreeHint to provide additional information at\nFree(), e.g. size. The template parameter is the same as PartitionRoot\nFree()\u0027s, i.e. `template \u003cFreeFlags flags\u003e Free(void*,\nFreeHint\u003cflags\u003e::Type)`. If FreeFlags contains kWithSizeHint (constexpr\nContainsFlags), FreeHint\u003ckWithSizeHint|...\u003e::Type will have size member\nand PartitionRoot::Free() can use its value (otherwise, no size member).\nThis template struct helps us to avoid initializing and copying unused\nstruct members.\n\nBug: 501113274\nChange-Id: Ic7869bb2203182b8c1de201d45c2097dc1b69783\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7829127\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1636645}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b2bb5a9bb930c1538520150cb57da38005584907\n" }, { "commit": "3842bcc38cf3d73470ca8c223ac0db19d81e29fe", "tree": "d5618316b96ec9fed0d71c662fe6b56159680ae1", "parents": [ "ff212a1d6a4ab28b7d66ca99dcc736aff2329f66" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Tue May 26 08:53:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 26 08:57:10 2026" }, "message": "partition_alloc: Use PA_BUILDFLAG(IS_COMPONENT_BUILD)\n\nReplace the Chromium-specific `COMPONENT_BUILD` define with a\npartition_alloc buildflag.\n\n`is_component_build` is a standard GN argument defined by every\nembedder of partition_alloc (including Skia) to control\nwhether targets are built as shared or static libraries.\n\nHowever, adding the \"COMPONENT_BUILD\" define is specific to chromium.\nTo make partition_alloc to stand alone, we stop depending on it, and\nuse our own buildflag instead.\n\nFor example, Skia has its own way of managing symbol\nexports/imports using `SK_API` and `SKIA_IMPLEMENTATION`.\n\nBug: 351867706\nChange-Id: I83977752b166495feb1cf8a7f1826dd83be40f63\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7865294\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1635991}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 198db9f8405461131540fb83cdda95f63c37112f\n" }, { "commit": "ff212a1d6a4ab28b7d66ca99dcc736aff2329f66", "tree": "b6ede3b91ceb4848ac15448c87c2392bf5e1bdcb", "parents": [ "b6aef8525a29639a92208d85993b6979cf2b0460" ], "author": { "name": "Fiona Verzivolli", "email": "fionav@google.com", "time": "Thu May 21 14:30:38 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 21 14:32:27 2026" }, "message": "Clean up launch for PartitionAllocLockTuneSpin\n\nThis change hardcodes the `spin_count` for PartitionAlloc\u0027s\nSpinningMutex on Android ARM64 to 2048, since 2048 was found to be\noptimal due to the PartitionAllocLockTuneSpin Finch experiment.\n\nBug: 501373446\nChange-Id: I55a84c6bf56f9afec4826ef4da9b94d77d9e70f3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7859570\nReviewed-by: Anand Ravi \u003canandrv@google.com\u003e\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCommit-Queue: Fiona Verzivolli \u003cfionav@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1634257}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 376fa2bf63433d3088cf680d5da2c505b006e3fd\n" }, { "commit": "b6aef8525a29639a92208d85993b6979cf2b0460", "tree": "e7b5db138f7969a3297a4e2977b3ed655edf1087", "parents": [ "16682d173493ecf1d8541928138067e39f017058" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Tue May 19 07:55:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 19 07:58:02 2026" }, "message": "Run `gn format` on all BUILD.gn files.\n\nNO_IFTTT\u003dFormatting change only\n\nLink: https://chromium-review.googlesource.com/id/I94ec311d69c76b9f85351c08b4d3bd216a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7858711\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nOwners-Override: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCommit-Queue: Matt Stark \u003cmsta@google.com\u003e\nSLSA-Policy-Verified: SLSA Policy Verification Service \u003cdevtools-gerritcodereview-exitgate@google.com\u003e\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1632679}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ad14f9bebfdee678ba25da9430c2d5c3b00d6a11\n" }, { "commit": "16682d173493ecf1d8541928138067e39f017058", "tree": "1e0cfd6ac84b9e7269931bdc3c7b4b6720828a4f", "parents": [ "df574853c6d7c1c0e958af24ea0c235fc2bab31d" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Tue May 19 00:32:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 19 00:33:56 2026" }, "message": "PA: Make GetZeroSegmentSize() public\n\nBug: 40925855\n\nChange-Id: Ib0a0663eebec29c0abaa97f6c5ea47c45f75bab8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7850604\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1632522}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 58c6cb30b313a31447ad889086e8efe29f43ea1b\n" }, { "commit": "df574853c6d7c1c0e958af24ea0c235fc2bab31d", "tree": "e83889369603f4adfbbd449154ef1433c687e2da", "parents": [ "9c88596f443e535086fd3b69214864cf8f989f1b" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Thu May 14 23:56:32 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 14 23:58:18 2026" }, "message": "Reland \"Split PartitionAlloc headers into internal ones and public ones\"\n\nThis is reland of crrev.com/c/7795856. The reason why 7795856 was\nreverted is that allocator_shim_default_dispatch_to_partition_alloc.cc\ndepends on address_pool_manager.h directly, but doesn\u0027t include it\n(indirectly include). So modified\nallocator_shim_default_dispatch_to_partition_alloc.cc to include it.\n\nThe reason why No-Try is that linux-chromeos-rel\u0027s ash_unittests fail\nbecause of timeout. The timeouts seemed to be caused by llvm_profiler\n(code coverage check). If this CL causes the same timeouts after\nlanding, I will revert this CL.\n\nBypass-Check-License: page_allocator_internal.h is just moved, not newly added. No need to check its license.\nNo-Try: true\nChange-Id: I3c21220d90956210110095e70d6ea74931cbddd4\nCq-Include-Trybots: luci.chromium.try:android-cast-arm-rel,android-cast-arm64-rel\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7847692\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1630913}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7c766eb88a59f73ca3cdf80f4e1bd4ef992ed310\n" }, { "commit": "9c88596f443e535086fd3b69214864cf8f989f1b", "tree": "eb22844e1399aece6d0fc8ab9bb24f09c162756c", "parents": [ "4e22396e1d7706f015d2bb2382222fc2235b8cd5" ], "author": { "name": "Andrea Orru", "email": "andreaorru@chromium.org", "time": "Thu May 14 00:05:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 14 00:08:21 2026" }, "message": "Revert \"Split PartitionAlloc headers into internal ones and public ones\"\n\nThis reverts commit cd836a819c4401c7a455400ac2112d83764060c3.\n\nReason for revert: suspected for tree closure https://ci.chromium.org/ui/p/chromium/builders/ci/android-cast-arm-rel/32082/overview\n\nOriginal change\u0027s description:\n\u003e Split PartitionAlloc headers into internal ones and public ones\n\u003e\n\u003e PS1 \u003d baseline (copy headers into internal/)\n\u003e\n\u003e The reason why No-Try is that linux-chromeos-rel\u0027s ash_unittests fail\n\u003e because of timeout. The timeouts seemed to be caused by llvm_profiler\n\u003e (code coverage check). If this CL causes the same timeouts after\n\u003e landing, I will revert this CL.\n\u003e\n\u003e Bypass-Check-License: page_allocator_internal.h is just moved, not newly added. No need to check its license.\n\u003e No-Try: true\n\u003e Change-Id: I3481802fd95e229b1e287dabd67b4e2490d763e1\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7795856\n\u003e Commit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\n\u003e Reviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\n\u003e Reviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1630318}\n\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Ie744a441026645b582d9994878bf67426c37cbe6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7846961\nCommit-Queue: Andrea Orru \u003candreaorru@chromium.org\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nOwners-Override: Andrea Orru \u003candreaorru@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1630322}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5e8bd89900b807519c27e9fe24bdf1fc0d86e2fd\n" }, { "commit": "4e22396e1d7706f015d2bb2382222fc2235b8cd5", "tree": "58f8da743abd70b82fe1c617c50d3bd575d2139c", "parents": [ "c0432b814840f5c1b65e823fea393a6f5ec1806f" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Wed May 13 23:51:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 13 23:54:42 2026" }, "message": "Split PartitionAlloc headers into internal ones and public ones\n\nPS1 \u003d baseline (copy headers into internal/)\n\nThe reason why No-Try is that linux-chromeos-rel\u0027s ash_unittests fail\nbecause of timeout. The timeouts seemed to be caused by llvm_profiler\n(code coverage check). If this CL causes the same timeouts after\nlanding, I will revert this CL.\n\nBypass-Check-License: page_allocator_internal.h is just moved, not newly added. No need to check its license.\nNo-Try: true\nChange-Id: I3481802fd95e229b1e287dabd67b4e2490d763e1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7795856\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1630318}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cd836a819c4401c7a455400ac2112d83764060c3\n" }, { "commit": "c0432b814840f5c1b65e823fea393a6f5ec1806f", "tree": "eb22844e1399aece6d0fc8ab9bb24f09c162756c", "parents": [ "293042101801b11c6d1b209f39ebce192a692558" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Wed May 13 09:44:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 13 09:48:07 2026" }, "message": "Launch PartitionAllocWithAdvancedChecks (MiracleObject) on Browser UI\n\nEnabling the feature by default. Fixing some unit test failures.\n\nBug: 351974425\nChange-Id: I63d7522907fe459da035c8e0ddf2c5b27425551a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7761746\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1629854}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 34c2ad416612c80386e0662b1cfb5e5425210b8a\n" }, { "commit": "293042101801b11c6d1b209f39ebce192a692558", "tree": "82808633cdffc4e83bac63e5c823910469e79e3d", "parents": [ "a6fd7d15807e10a2c17e9854bc28e714ad43ce4b" ], "author": { "name": "Maksim Ivanov", "email": "emaxx@google.com", "time": "Wed May 13 01:56:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 13 01:58:47 2026" }, "message": "[gin] Pkey mprotect thread isolation data\n\nAssign the thread isolation pkey to the global struct that\u0027s holding the\nthread isolation data.\n\nThis makes it write-protected, preventing possible bypass of the thread\nisolation feature in case of a presence of a write gadget (on platforms\nwhere the isolation feature is supported).\n\nBug: 493206872\nChange-Id: Iab8bf4da852a7c64977be9ffe0eddc6453c628a1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7748632\nReviewed-by: Stephen Röttger \u003csroettger@google.com\u003e\nReviewed-by: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCommit-Queue: Maksim Ivanov \u003cemaxx@chromium.org\u003e\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1629704}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 638f2dda7d7096fc45b53df3c9036128010d1a26\n" }, { "commit": "a6fd7d15807e10a2c17e9854bc28e714ad43ce4b", "tree": "8908d6c57ffc79aedb5cba933e6edddd402667db", "parents": [ "21720ad3649f963580a8f238e698740226252ad6" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Tue May 12 08:29:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 12 08:31:43 2026" }, "message": "[PartitionAlloc] Guard `no_default_deps` with `build_with_chromium`\n\nWhen PartitionAlloc is embedded in standalone GN builds (like Skia) as\na component build on Windows, the `no_default_deps \u003d true` assignment\nfails the GN evaluation with \"Assignment had no effect\".\n\nThis occurs because `no_default_deps` is not a built-in GN variable,\nbut rather relies on Chromium\u0027s wrapper templates to intercept and\nuse it. Standalone builds that map `component` to a standard\n`shared_library` do not consume it.\n\nThis CL wraps the assignment in `if (build_with_chromium)` to allow\nstandalone GN builds to succeed.\n\nBug: 351867706\nChange-Id: Id89392613b78097813b6b462b11795fd3425a67f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7827478\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1629136}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a8b5ac23ee4fc343b324fb9d4d54d3e04bbe3897\n" }, { "commit": "21720ad3649f963580a8f238e698740226252ad6", "tree": "366564d71838ca94e22be0f0bbfba454ee0a696c", "parents": [ "eac4514f89ca7094b4575de7f40500775c7cb1bf" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Tue May 12 03:24:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 12 03:27:25 2026" }, "message": "Expand DynamicPoolSize from IOS test only to also normal function.\n\nCurrently if we encounter a HandlePoolAllocFailure we crash, but we\ncrash so early that we only receive reports if the user is able to\nsuccessfully start up later. Thus we don\u0027t know if this is common or if\nit is only uncommon for users to eventually recover.\n\nThis attempts to expand the dynamic pool size feature from being IOS\ntest only to also be half sized pools to allow iOS to \"gracefully\"\nfallback to smaller pools (they will likely oom at a higher rate).\n\nWe also add a UMA histogram to track how frequently this occurs.\n\nBug: 489679627\nChange-Id: Ifdfe1bf5a78f23ac7492532ce22aa1659f7000dd\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7735705\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Thiabaud Engelbrecht \u003cthiabaud@google.com\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1629024}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 96a4096d324801bce227aab12c8efe116b2231a6\n" }, { "commit": "eac4514f89ca7094b4575de7f40500775c7cb1bf", "tree": "efe728ada3d092b40198c4b76c342e1181a7f706", "parents": [ "d73d51180e51b6eff9cebee16b763271152ef7ed" ], "author": { "name": "Chunyang", "email": "chunyanghuo@microsoft.com", "time": "Fri May 08 07:31:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 08 07:33:59 2026" }, "message": "[PA][macOS] Fix SIGBUS in MallocZoneSize on freed super pages\n\nOn macOS, the system (CoreFoundation/AppKit) may call malloc_zone_size()\non any pointer to determine zone ownership. When called on a pointer in\na freed direct-mapped PartitionAlloc super page, GetSizeEstimate()\ncrashes with SIGBUS because:\n\n1. IsManagedByPartitionAlloc() only checks the GigaCage pool range,\n which remains valid even after the super page is freed via\n UnmapNow().\n2. The subsequent metadata access at PartitionPageMetadata::FromAddr()\n hits a decommitted page.\n\nAdditionally, in UnmapNow(), the metadata is decommitted before the\nReservationOffsetTable is updated with SetNotAllocatedTag(), creating a\nTOCTOU race window where concurrent callers see \"allocated\" in the\ntable but the metadata is already gone.\n\nFix:\n- Add ReservationOffsetTable::IsManagedByNormalBucketsOrDirectMap()\n check in GetSizeEstimate() after the GigaCage range check, before\n accessing metadata. Returns 1 if the super page has been freed.\n- Reorder UnmapNow() to call SetNotAllocatedTag() before\n DecommitAndZeroSystemPages() to close the race window.\n\nBug: 510013808\nChange-Id: I2c94f766819922f9a76ad1b244d4f12c9a1b0d92\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7820194\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Chunyang Huo \u003cchunyanghuo@microsoft.com\u003e\nCr-Commit-Position: refs/heads/main@{#1627503}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 58edd49bc53dca2c036d0f2a3b520578b1a9a8cd\n" }, { "commit": "d73d51180e51b6eff9cebee16b763271152ef7ed", "tree": "10711f2086b9618dfee1af8457bbaa39a40423ba", "parents": [ "ad087221d72106dd91e72c2ed00e1a1954b955e8" ], "author": { "name": "Fergal Daly", "email": "fergal@chromium.org", "time": "Fri May 08 07:14:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 08 07:18:29 2026" }, "message": "Mark 2 calculations in raw_ptr_asan_unowned.cc as PA_UNSAFE_TODO\n\nBug: 510915930\nChange-Id: I2d3dfd25240825e04b8a2b65ddca2c04e9c0db3c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7831823\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Fergal Daly \u003cfergal@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1627499}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8779a41a5f26682a87af8aa6b18e85b20e3355f7\n" }, { "commit": "ad087221d72106dd91e72c2ed00e1a1954b955e8", "tree": "4314445f7634a48dfaff1c68bc5221afc3f99458", "parents": [ "fafdd4c9f559c6d0cfdf2ed3170ce370b59bfdbf" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Tue May 05 20:02:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 05 20:04:20 2026" }, "message": "Add a new security macro to make AMCS object quarantined infinitely\n\nBug: 501113274\nChange-Id: I46be5b06ab311ee296a8b568f92e92ff9390dbf8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7759168\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1625671}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: efe929a3d4cc78e96caf2f451a5d66afa2fcfd09\n" }, { "commit": "fafdd4c9f559c6d0cfdf2ed3170ce370b59bfdbf", "tree": "a91752b31a555a7c5cb2a6c97a7165af5fec785d", "parents": [ "40f804cea28c3cb86cd852f80aee11ecc268f03d" ], "author": { "name": "Michael Lippautz", "email": "mlippautz@chromium.org", "time": "Fri Apr 24 09:56:20 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Apr 24 10:00:14 2026" }, "message": "PartitionAlloc: Adds a feature to acquire a zero segment\n\nThe zero segment in user-space is similar to Mach-O\u0027s __PAGEZERO segment\nin that it ensures that a certain range of virtual address space can\nnever be allocated as writable.\n\nOn supported platforms we try to get a zero segment of 4G+1M. This is a\nfeature required by the V8 Sandbox. Trying to acquire the reservation on\nV8 initialization is not robust enough to even make it through the CQ as\nsometimes PA randomly allocates memory in this range.\n\nThe feature is already enabled for Mac and Linux (not Android or CrOS).\nFollow up work will enable this on more platforms.\n\nThe feature allows for accommodating different zero segments already\nprovided by the OSes. It also allows for adding trailing bytes to\naccommodate the fact that there may be objects allocated close to the 4G\nboundary.\n\nThe feature adds a PA API to check whether the segment has been\nacquired. This is useful to conditionally enforce getting the segment,\ne.g. on the Chrome release binary. It\u0027s likely impossible to guarantee\nthe segment in the general case as there\u0027s various helper binaries that\nare e.g. invoked through Python or shell helpers.\n\nBug: 40925855\nChange-Id: Iffa039eaa5646b2fb64ff1f787e19a47d109c0ed\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7768952\nReviewed-by: Anton Bikineev \u003cbikineev@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Michael Lippautz \u003cmlippautz@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1620058}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9924b55aea926428b2953715d706f76117800a6e\n" }, { "commit": "40f804cea28c3cb86cd852f80aee11ecc268f03d", "tree": "a5aafd83fc09340eb0a9ea5a3ac3e81d7b38af76", "parents": [ "ff619bba16d15e0e46617bed9428d9e271629e83" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Thu Apr 23 08:39:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 23 08:41:37 2026" }, "message": "Enable AsanRawPtrServiceV2 for LibFuzzer by decoupling build configs\n\nThis CL restructures the AsanRawPtrService integration to fix build\ndependency issues and resolve sanitizer false positives.\n\nKey changes:\n\n- Decouple from `//build`: Moves the `-fsanitize-recover\u003daddress`\n configuration to `//base` using `all_dependent_configs`. This\n ensures the flag is only active when\n `use_asan_backup_ref_ptr_v2\u003dtrue`, preventing PartitionAlloc GN\n variables from polluting the global `//build` directory and\n breaking standalone projects like V8.\n\n- Isolate as a `source_set`: Extracts `asan_raw_ptr_service` into\n a dedicated `source_set`. This cleanly scopes the new compiler\n flags and guarantees that inlined functions (from libc++ or\n PartitionAlloc) aren\u0027t accidentally instrumented by ASan,\n preventing performance regressions.\n\nBug: 447520906\nChange-Id: I8de5d5f21965ed748a423b8bf4c9201c201a9c66\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7741881\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1619382}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5cadc03d73d8630975295207c93b523d1bac039b\n" }, { "commit": "ff619bba16d15e0e46617bed9428d9e271629e83", "tree": "d43c38b56d9774d869114e67f97f0577cba1d4eb", "parents": [ "5fb10b3a3ed87a6127bfbc03526820ac664da7ec" ], "author": { "name": "gate kibr", "email": "gkvjwa@gmail.com", "time": "Tue Apr 21 00:44:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 21 00:46:43 2026" }, "message": "Reland \"Fix incorrect logical operator in spinning_mutex PA_DCHECK\"\n\nThis is a reland of commit 206293a8064f49c913e89ef39b333d252645fd67\n\nCapture errno into a local variable to prevent it from being modified\nbetween the check and the diagnostic message and skip the FutexMigration\ntest on kernels older than 5.14 where FUTEX_LOCK_PI2(13) is not\nsupported and returns ENOSYS\n\nOriginal change\u0027s description:\n\u003e Fix incorrect logical operator in spinning_mutex PA_DCHECK\n\u003e\n\u003e Replace PA_DCHECK((errno !\u003d EACCES) || (errno !\u003d EINVAL)) with\n\u003e PA_DCHECK((errno !\u003d EACCES) \u0026\u0026 (errno !\u003d EINVAL) \u0026\u0026 ..). The OR\n\u003e expression is always true and never triggers the assertion\n\u003e\n\u003e Bug: 384902323\n\u003e Change-Id: Ie63b69ff8fd06af3a6b15cde18251eb8164d320c\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7703594\n\u003e Commit-Queue: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Reviewed-by: Anand Ravi \u003canandrv@google.com\u003e\n\u003e Reviewed-by: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1610593}\n\nBug: 384902323, 500418107\nChange-Id: Ica0b62db5872f85a5e22a1e2cdbf4d789241b005\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7738222\nReviewed-by: Will Harris \u003cwfh@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Anand Ravi \u003canandrv@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1617903}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c2516e606a01347f70543096129bd5f93aa5b9b0\n" }, { "commit": "5fb10b3a3ed87a6127bfbc03526820ac664da7ec", "tree": "66e6b2e22c67cc074d37b11b4e5c7fcb259a73da", "parents": [ "dc52788873f7d48d712d18c47ee0ac0af6673778" ], "author": { "name": "luci-bisection@appspot.gserviceaccount.com", "email": "luci-bisection@appspot.gserviceaccount.com", "time": "Mon Apr 20 19:46:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 20 19:49:31 2026" }, "message": "Revert \"Checked Span: Enable in release\"\n\nThis reverts commit 41af5c65823240f0a1510b3d9e9990d0c1e03252.\n\nReason for revert:\nLUCI Bisection has identified this change as the cause of a test failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/test-analysis/b/5663475524173824\n\nSample build with failed test: https://ci.chromium.org/b/8684007343561524673\nAffected test(s):\n[://\\:headless_shell_wpt!webtest::external/wpt/fledge/tentative#private-aggregation.https.window.html?16-20](https://ci.chromium.org/ui/test/chromium/:%2F%2F%5C:headless_shell_wpt%21webtest::external%2Fwpt%2Ffledge%2Ftentative%23private-aggregation.https.window.html%3F16-20?q\u003dVHash%3A53d021cf126e7a21)\n\nIf this is a false positive, please report it at http://b.corp.google.com/createIssue?component\u003d1199205\u0026description\u003dAnalysis%3A+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Ftest-analysis%2Fb%2F5663475524173824\u0026format\u003dPLAIN\u0026priority\u003dP3\u0026title\u003dWrongly+blamed+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F7624900\u0026type\u003dBUG\n\nOriginal change\u0027s description:\n\u003e Checked Span: Enable in release\n\u003e\n\u003e We fully expect this to get reverted, perhaps automatically, and that\u0027s\n\u003e all right. This CL is intended to show the viability (or the major sharp\n\u003e edges) of Checked Span in a canary / dev release of Chrome.\n\u003e\n\u003e Change-Id: Ice22e05e5bf050dc09b1eeb1f3b8226ba1c75dbe\n\u003e Bug: 501113358\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7624900\n\u003e Auto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Commit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1617375}\n\u003e\n\nBug: 501113358\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Ib21e36e42729a78cc91b59a938bfb455e39491e8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7778248\nReviewed-by: Muyao Xu \u003cmuyaoxu@google.com\u003e\nCommit-Queue: Muyao Xu \u003cmuyaoxu@google.com\u003e\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Amelie Schneider \u003camelies@google.com\u003e\nOwners-Override: Sébastien Lalancette \u003cseblalancette@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1617711}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f37c02dfb3a26a7283e8584df6c4f505daf2f8f7\n" }, { "commit": "dc52788873f7d48d712d18c47ee0ac0af6673778", "tree": "16693bc715aa5990dd4369fc9c9874cfeaa4ff51", "parents": [ "dfb7f6351846b120b613765e4f13dc7f4233c4b7" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Apr 20 10:33:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 20 10:34:37 2026" }, "message": "Checked Span: Enable in release\n\nWe fully expect this to get reverted, perhaps automatically, and that\u0027s\nall right. This CL is intended to show the viability (or the major sharp\nedges) of Checked Span in a canary / dev release of Chrome.\n\nChange-Id: Ice22e05e5bf050dc09b1eeb1f3b8226ba1c75dbe\nBug: 501113358\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7624900\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1617375}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 41af5c65823240f0a1510b3d9e9990d0c1e03252\n" }, { "commit": "dfb7f6351846b120b613765e4f13dc7f4233c4b7", "tree": "66e6b2e22c67cc074d37b11b4e5c7fcb259a73da", "parents": [ "deed53b5417b214d6d86ebbe991c71842546982f" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Apr 16 16:22:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 16 16:24:36 2026" }, "message": "Checked Span: Move `IsExtentInBounds()` out\n\nIncluding the headers for `CheckedNumeric` (and maybe `StrictNumeric`)\ncauses the compile-size bot to report ~2GiB of bloat.\n\nMove these out-of-line. `IsExtentInBounds()` currently has no callers\n(and, when we think about it, perhaps it may never gain any, unless\nProject Fortify changes quite a bit), so the change is self-contained.\n\nBug: 501113358\nChange-Id: I9911d0fb7fe94ebb83be5707fdf23b31e8ecf340\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7762152\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCommit-Queue: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1615924}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7518d3ca0b96c500a1cf5be523f156c22282ce4b\n" }, { "commit": "deed53b5417b214d6d86ebbe991c71842546982f", "tree": "c1e54a7a7978d03f2e98093a0ef9f65077e5388b", "parents": [ "0fdd90c827f445be15c7a45448272515eb507700" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Tue Apr 14 04:59:19 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 14 05:01:12 2026" }, "message": "Make ReservationOffsetTable NotAllocated when DirectMap allocation with kReturnNull fails.\n\nBug: 502299262\nChange-Id: Iaa82d9eb5bcbd0740101c1dd7e7c6e772d60e98b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7759816\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1614224}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1dcf1dbe32fc0637ec18f1c7b3e6f104f419cf6e\n" }, { "commit": "0fdd90c827f445be15c7a45448272515eb507700", "tree": "2959a8de8020bdc22bd77f25707ac2f1cb1b43f9", "parents": [ "d9e6ce10c27d1059b804e9d57d0d155f8dad798d" ], "author": { "name": "Dailen King", "email": "dailenking@microsoft.com", "time": "Mon Apr 13 17:22:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 17:24:28 2026" }, "message": "[PartitionAlloc] Skip FutexMigration test without PI futex support\n\nThe FutexMigration unit test enables PI-futex migration directly, but the runtime only does that on kernels that support PI futexes. Skip the test when that support is absent so unsupported Android kernels don\u0027t fail or hang.\n\nBug: 500418107\nChange-Id: Ibf5e89088d33a82b8f74e7cbe4ee7464b7d4f759\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7745842\nReviewed-by: Anand Ravi \u003canandrv@google.com\u003e\nCommit-Queue: Dailen King \u003cdailenking@microsoft.com\u003e\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613822}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 04c4c9b00af4ab297a628e94a464b6c0f662c612\n" }, { "commit": "d9e6ce10c27d1059b804e9d57d0d155f8dad798d", "tree": "a4f0a0ea0b26569c23bb8f9a35e93adbdae0b41a", "parents": [ "9e005cf3bb7d9514f416edb45363ee88c323d726" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Apr 13 09:12:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 09:16:15 2026" }, "message": "Checked Span: Activate in `is_debug`\n\nFor 64-bit platforms only. Checked Span doesn\u0027t yet support 32-bit.\nAlso cut out all sanitizer builds with a note explaining why.\n\nBug: 501113358\nChange-Id: I3a825f128901711e0065e5b7041728d1b42e2482\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7673121\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613570}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c503983b9fa47cfc0ceee82a6e6c1d0c60e01aed\n" }, { "commit": "9e005cf3bb7d9514f416edb45363ee88c323d726", "tree": "80c8b6a82492d5f2a668061ee4c6573efef47965", "parents": [ "7be1a61f68fd36d1c1c31ef87190a83ca1a64e92" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Mon Apr 13 06:33:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 06:37:28 2026" }, "message": "Checked Span: Handle volatile pointers\n\nhttps://crrev.com/c/7734387 introduced spans of volatile bytes. These\nwere not previously handled in the implementation of Checked Span.\n\nBug: 484171909\nChange-Id: I3b12310a1f86eae353df5982be02dbd532cb8eba\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7743702\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613512}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 99b5a79ef37b9ce572fb3624d86b0f1824faed76\n" }, { "commit": "7be1a61f68fd36d1c1c31ef87190a83ca1a64e92", "tree": "35ea04a17e5f2028479d5bae579b2a846439510a", "parents": [ "c6953320d41d503d7957b9fc3b9c26bee408165c" ], "author": { "name": "Justin", "email": "justincohen@google.com", "time": "Mon Apr 13 02:33:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 02:36:15 2026" }, "message": "Reland \"ios: Skip InaccessiblePages test on iOS when debugger is attached\"\n\nThis reverts commit b398899602362586f312bf7b0c522f0d2301b3e8.\n\nReason for revert: Fixed on asan bot. See patchset 1..2\n\nOriginal change\u0027s description:\n\u003e Revert \"ios: Skip InaccessiblePages test on iOS when debugger is attached\"\n\u003e\n\u003e This reverts commit bc99557789229da2d5942e8d3e1637e98796bc74.\n\u003e\n\u003e Reason for revert: Broke `ios-asan`:\n\u003e https://ci.chromium.org/ui/p/chromium/builders/ci/ios-asan/101778/overview\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e ios: Skip InaccessiblePages test on iOS when debugger is attached\n\u003e \u003e\n\u003e \u003e InaccessiblePages uses POSIX signals to test inaccessible memory.\n\u003e \u003e However, when a debugger is attached on iOS, the debugger intercepts the\n\u003e \u003e EXC_BAD_ACCESS (or SIGSEGV) exception, which causes the test to fail.\n\u003e \u003e This is disruptive for developers trying to run partition_alloc tests\n\u003e \u003e locally via Xcode.\n\u003e \u003e\n\u003e \u003e This CL skips the InaccessiblePages test on iOS when the debugger is\n\u003e \u003e attached, and logs a message indicating why the test was skipped.\n\u003e \u003e\n\u003e \u003e Change-Id: Ib2b0760568a5ce3dde8ee6e3a78e297141a9bc09\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7736163\n\u003e \u003e Auto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\n\u003e \u003e Reviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\n\u003e \u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e \u003e Commit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1612285}\n\u003e\n\u003e No-Presubmit: true\n\u003e No-Tree-Checks: true\n\u003e No-Try: true\n\u003e Change-Id: Id3486a1caf2b23e9d2ad10db5a815af6b3cc0f5b\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7744845\n\u003e Auto-Submit: Jonathan Lee \u003cjonathanjlee@google.com\u003e\n\u003e Bot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Commit-Queue: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Owners-Override: Jonathan Lee \u003cjonathanjlee@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1612310}\n\nChange-Id: I19762afded653ebd716e568bb124112e40722308\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7742848\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613475}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 97537604fb66aa63c71e31f6ddba4a56d4487bfc\n" }, { "commit": "c6953320d41d503d7957b9fc3b9c26bee408165c", "tree": "bc632c8ba98202370e5dc7b6cf7ca2e218fd2047", "parents": [ "69f06829993fe56ba3e5454054d7787a852afa51" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Thu Apr 09 17:59:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 18:01:21 2026" }, "message": "[base] Optimize stringstream usage\n\nUse view() or std::move().str() on stringstreams across base/ to avoid\nunnecessary string copies or temporary allocations.\n\nThe use of std::move(ss).str() leverages the C++20 rvalue-reference\nqualified overload of basic_stringstream::str(). This allows the\nstringstream to move its internal buffer into the returned std::string,\navoiding a full copy and an additional heap allocation. Similarly,\nss.view() (also C++20) is used to get a string_view of the internal\nbuffer without a copy.\n\nBug: 500993968\nChange-Id: I185a78e6d42099af9a89c24ba087b0a8f85fa040\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7740986\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1612361}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2c11bad8e046bf7f1e407305fa1abf2172deeffa\n" }, { "commit": "69f06829993fe56ba3e5454054d7787a852afa51", "tree": "9c09411d893fe442fa62066dbde21e2a17f3314a", "parents": [ "f5002dab5ab2e87b5f98a9d9451a33f9bf9f797b" ], "author": { "name": "Jonathan Lee", "email": "jonathanjlee@google.com", "time": "Thu Apr 09 17:02:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 17:04:24 2026" }, "message": "Revert \"ios: Skip InaccessiblePages test on iOS when debugger is attached\"\n\nThis reverts commit bc99557789229da2d5942e8d3e1637e98796bc74.\n\nReason for revert: Broke `ios-asan`:\nhttps://ci.chromium.org/ui/p/chromium/builders/ci/ios-asan/101778/overview\n\nOriginal change\u0027s description:\n\u003e ios: Skip InaccessiblePages test on iOS when debugger is attached\n\u003e\n\u003e InaccessiblePages uses POSIX signals to test inaccessible memory.\n\u003e However, when a debugger is attached on iOS, the debugger intercepts the\n\u003e EXC_BAD_ACCESS (or SIGSEGV) exception, which causes the test to fail.\n\u003e This is disruptive for developers trying to run partition_alloc tests\n\u003e locally via Xcode.\n\u003e\n\u003e This CL skips the InaccessiblePages test on iOS when the debugger is\n\u003e attached, and logs a message indicating why the test was skipped.\n\u003e\n\u003e Change-Id: Ib2b0760568a5ce3dde8ee6e3a78e297141a9bc09\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7736163\n\u003e Auto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\n\u003e Reviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Commit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1612285}\n\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Id3486a1caf2b23e9d2ad10db5a815af6b3cc0f5b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7744845\nAuto-Submit: Jonathan Lee \u003cjonathanjlee@google.com\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nOwners-Override: Jonathan Lee \u003cjonathanjlee@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1612310}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b398899602362586f312bf7b0c522f0d2301b3e8\n" }, { "commit": "f5002dab5ab2e87b5f98a9d9451a33f9bf9f797b", "tree": "51851ea6e72c07f5cb8d5f57ca1748f84b2087a1", "parents": [ "6dd8b3da35ede19687a96115189915f54462a2b0" ], "author": { "name": "Justin Cohen", "email": "justincohen@google.com", "time": "Thu Apr 09 16:09:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 16:11:15 2026" }, "message": "ios: Skip InaccessiblePages test on iOS when debugger is attached\n\nInaccessiblePages uses POSIX signals to test inaccessible memory.\nHowever, when a debugger is attached on iOS, the debugger intercepts the\nEXC_BAD_ACCESS (or SIGSEGV) exception, which causes the test to fail.\nThis is disruptive for developers trying to run partition_alloc tests\nlocally via Xcode.\n\nThis CL skips the InaccessiblePages test on iOS when the debugger is\nattached, and logs a message indicating why the test was skipped.\n\nChange-Id: Ib2b0760568a5ce3dde8ee6e3a78e297141a9bc09\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7736163\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1612285}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bc99557789229da2d5942e8d3e1637e98796bc74\n" }, { "commit": "6dd8b3da35ede19687a96115189915f54462a2b0", "tree": "9c09411d893fe442fa62066dbde21e2a17f3314a", "parents": [ "4f6607c5eff5789d34cdbdb460578a3ef93fbe33" ], "author": { "name": "Will Harris", "email": "wfh@chromium.org", "time": "Thu Apr 09 00:45:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 00:47:20 2026" }, "message": "Remove 2GiB limit from the winheap system allocator.\n\nThe 2GiB limit remains on partition alloc which is the default allocator\nfor all binaries.\n\nThis brings Windows system allocator behavior in line with other\nplatforms.\n\nThe system allocator is currently not used for anything on Windows\n(except two tests), as can be seen from the PS1 tryjob where all other\ntests pass (also verified by compiling and running Chrome installer and\nChrome locally).\n\nTherefore this changes no behavior, merely brings Windows in line with\nother platforms.\n\nBUG\u003d498512075\n\nChange-Id: I09c5e0d39b2496d82bcbd12178c2e9c602ab3b2e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7738374\nReviewed-by: Alex Gough \u003cajgo@chromium.org\u003e\nCommit-Queue: Will Harris \u003cwfh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1611902}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bb25f56225963ca279641d397a8a53ec72645304\n" }, { "commit": "4f6607c5eff5789d34cdbdb460578a3ef93fbe33", "tree": "46795c6e6b0bb80f294bc9dcff2dd484917f6d81", "parents": [ "8013b1e0ce431d1587f41b46ed7cdaa3c024575a" ], "author": { "name": "Will Harris", "email": "wfh@chromium.org", "time": "Thu Apr 09 00:32:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 09 00:35:12 2026" }, "message": "Reland \"Fix system_allocator toolchain on Windows\"\n\nThis is a reland of commit 2b3ee807d7a91d71a9e06256e0f0904ff9145281\n\nThe previous version failed to take into account msan configuration\nwhere the msan libraries have to be distinguished from the non-msan when\nusing a different toolchain.\n\nOriginal change\u0027s description:\n\u003e Fix system_allocator toolchain on Windows\n\u003e\n\u003e This code was not actively being used on Windows, so had rotted a bit,\n\u003e and was not even compiling.\n\u003e\n\u003e Fix these issues, and a test to verify system_allocator works on all\n\u003e supported platforms, which for now is Windows and Linux.\n\u003e\n\u003e BUG\u003d499018892\n\u003e\n\u003e Change-Id: Icff86df47ecb17bb7ca09d9c9defe7ccc8cc6bf5\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7729507\n\u003e Reviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\n\u003e Commit-Queue: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1610686}\n\nBug: 499018892\nChange-Id: I161c72ed66c0c006725bd6fc7f210e7ac077e147\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7736067\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nCommit-Queue: Will Harris \u003cwfh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1611895}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 72be3378d1b13dc3ad0f1783e1ce681c3ee08d40\n" }, { "commit": "8013b1e0ce431d1587f41b46ed7cdaa3c024575a", "tree": "a59c80d0d64777c09f317a50d7f204ad40225387", "parents": [ "95080735a9f5b8c39891f58aca3922e84b6f7de8" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Wed Apr 08 15:31:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 08 15:32:52 2026" }, "message": "[PA] Hide AutoPartitioning behind its own flag\n\nSo that we can enable AllocToken independently.\nThis also moves some symbols which were defined in the global namespace\ninto `allocator_shim::`.\n\nChange-Id: I1da8cf7e57f54a0fa39dae2c18497751f5ae8974\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7736841\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1611531}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 307261fb2965d605d65169355470f70d2aff4db4\n" }, { "commit": "95080735a9f5b8c39891f58aca3922e84b6f7de8", "tree": "4dac3f6aa81cea9da4834fc242819b8feaeaf959", "parents": [ "17b8b409bd3e4c2ee3357729f6dc6ea82d149d4a" ], "author": { "name": "Peilin Wang", "email": "peilinwang@google.com", "time": "Tue Apr 07 18:58:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 07 19:00:18 2026" }, "message": "[Gardener] Revert \"Fix incorrect logical operator in spinning_mutex PA_DCHECK\"\n\nThis reverts commit 206293a8064f49c913e89ef39b333d252645fd67.\n\nReason for revert: The test PartitionAllocLockTest.FutexMigration fails. Builder link: https://ci.chromium.org/ui/p/chromium/builders/ci/android-12l-x64-dbg-tests/40916/test-results\n\nOriginal change\u0027s description:\n\u003e Fix incorrect logical operator in spinning_mutex PA_DCHECK\n\u003e\n\u003e Replace PA_DCHECK((errno !\u003d EACCES) || (errno !\u003d EINVAL)) with\n\u003e PA_DCHECK((errno !\u003d EACCES) \u0026\u0026 (errno !\u003d EINVAL) \u0026\u0026 ..). The OR\n\u003e expression is always true and never triggers the assertion\n\u003e\n\u003e Bug: 384902323\n\u003e Change-Id: Ie63b69ff8fd06af3a6b15cde18251eb8164d320c\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7703594\n\u003e Commit-Queue: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Reviewed-by: Anand Ravi \u003canandrv@google.com\u003e\n\u003e Reviewed-by: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1610593}\n\nBug: 384902323\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I08006f23ba30813212cdbcd834d5a6369535c491\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7735578\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Peilin Wang \u003cpeilinwang@google.com\u003e\nAuto-Submit: Peilin Wang \u003cpeilinwang@google.com\u003e\nOwners-Override: Peilin Wang \u003cpeilinwang@google.com\u003e\nCommit-Queue: Peilin Wang \u003cpeilinwang@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1610921}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 97750022442f8eb752936b392fcdf0dc3721fe8b\n" }, { "commit": "17b8b409bd3e4c2ee3357729f6dc6ea82d149d4a", "tree": "eb61f2ee4a477d7a09af792bde9b8bbe6a4cbc66", "parents": [ "cd966c22c85712de62166be249d2b6d3f7727eff" ], "author": { "name": "Oleksandr Tara", "email": "otara@google.com", "time": "Tue Apr 07 13:42:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 07 13:44:20 2026" }, "message": "Revert \"Fix system_allocator toolchain on Windows\"\n\nThis reverts commit 2b3ee807d7a91d71a9e06256e0f0904ff9145281.\n\nReason for revert: Likely the culprit of https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20MSan%20Builder\nOriginal change\u0027s description:\n\u003e Fix system_allocator toolchain on Windows\n\u003e\n\u003e This code was not actively being used on Windows, so had rotted a bit,\n\u003e and was not even compiling.\n\u003e\n\u003e Fix these issues, and a test to verify system_allocator works on all\n\u003e supported platforms, which for now is Windows and Linux.\n\u003e\n\u003e BUG\u003d499018892\n\u003e\n\u003e Change-Id: Icff86df47ecb17bb7ca09d9c9defe7ccc8cc6bf5\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7729507\n\u003e Reviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\n\u003e Commit-Queue: Will Harris \u003cwfh@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1610686}\n\nBug: 499018892\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: Ied6a239ed2b0fe589b1af02f231df37c35c3ff2b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7735431\nCommit-Queue: Oleksandr Tara \u003cotara@google.com\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nOwners-Override: Oleksandr Tara \u003cotara@google.com\u003e\nAuto-Submit: Oleksandr Tara \u003cotara@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1610702}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f747855ad33cc3a298c1b8e9635d1a952bd8fece\n" }, { "commit": "cd966c22c85712de62166be249d2b6d3f7727eff", "tree": "a7449afb538c36eea084640503d749db170fc7a3", "parents": [ "61520b8aa761106983aee47689ab26fbe1dacfa4" ], "author": { "name": "Will Harris", "email": "wfh@chromium.org", "time": "Tue Apr 07 12:42:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 07 12:44:51 2026" }, "message": "Fix system_allocator toolchain on Windows\n\nThis code was not actively being used on Windows, so had rotted a bit,\nand was not even compiling.\n\nFix these issues, and a test to verify system_allocator works on all\nsupported platforms, which for now is Windows and Linux.\n\nBUG\u003d499018892\n\nChange-Id: Icff86df47ecb17bb7ca09d9c9defe7ccc8cc6bf5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7729507\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCommit-Queue: Will Harris \u003cwfh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1610686}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2b3ee807d7a91d71a9e06256e0f0904ff9145281\n" }, { "commit": "61520b8aa761106983aee47689ab26fbe1dacfa4", "tree": "eb61f2ee4a477d7a09af792bde9b8bbe6a4cbc66", "parents": [ "b5258e200dc8fc3ea0a3c02730258fda7633a9e4" ], "author": { "name": "gate kibr", "email": "gkvjwa@gmail.com", "time": "Tue Apr 07 07:53:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Apr 07 07:56:54 2026" }, "message": "Fix incorrect logical operator in spinning_mutex PA_DCHECK\n\nReplace PA_DCHECK((errno !\u003d EACCES) || (errno !\u003d EINVAL)) with\nPA_DCHECK((errno !\u003d EACCES) \u0026\u0026 (errno !\u003d EINVAL) \u0026\u0026 ..). The OR\nexpression is always true and never triggers the assertion\n\nBug: 384902323\nChange-Id: Ie63b69ff8fd06af3a6b15cde18251eb8164d320c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7703594\nCommit-Queue: Will Harris \u003cwfh@chromium.org\u003e\nReviewed-by: Anand Ravi \u003canandrv@google.com\u003e\nReviewed-by: Will Harris \u003cwfh@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1610593}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 206293a8064f49c913e89ef39b333d252645fd67\n" }, { "commit": "b5258e200dc8fc3ea0a3c02730258fda7633a9e4", "tree": "4dac3f6aa81cea9da4834fc242819b8feaeaf959", "parents": [ "b707a2ca5567b06f4b886fbcd888dfa7e8044718" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Apr 02 21:31:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 02 21:34:03 2026" }, "message": "[partition_alloc] Rename IS_CAST_ANDROID to ENABLE_SYSTEM_FREE_FALLBACK\n\nSkia\u0027s \u0027GrAHardwareBuffer_ImportAsSurface\u0027 test crashes on Pixel 4\n(Adreno 640) because Qualcomm\u0027s proprietary gralloc module\n(/vendor/lib64/libgralloccore.so) calls free() on memory not allocated\nby PartitionAlloc. This triggers a PA_NOTREACHED() trap in GetPoolInfo.\n\nThis is a general Android issue where vendor libraries bypass the\nallocator shim but their deallocations are still intercepted. PA\nalready has a fallback that forwards unknown pointers to system free(),\nbut it is currently hardcoded to IS_CAST_ANDROID.\n\nRename IS_CAST_ANDROID to ENABLE_SYSTEM_FREE_FALLBACK and add a new GN\narg \u0027partition_alloc_enable_system_free_fallback\u0027. This allows\nembedders like Skia to opt-in to the fallback on regular Android\nbuilds.\n\nChrome behavior is unchanged; the new arg defaults to is_cast_android.\n\nBug: 351867706\nChange-Id: I709e7adb3def0f2d8d7839d588334045edc2d91e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7718268\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1609497}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ed8ed77a1fc2a5ef2a54ebb0e7c14f0ea9a96441\n" }, { "commit": "b707a2ca5567b06f4b886fbcd888dfa7e8044718", "tree": "2017a29721ca23539efb05954a273643c00b677b", "parents": [ "3b21b53f577117db1fcbe80558f85e474e4f2f12" ], "author": { "name": "Sergio Solano", "email": "sergiosolano@google.com", "time": "Mon Mar 30 09:30:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 30 09:32:09 2026" }, "message": "Reland \"Making span.h available within partition_alloc.\"\n\nThis is a reland of commit 2277b42429420bf32aed450f0e6ab42910a2d7ad\n\nOriginal change\u0027s description:\n\u003e Making span.h available within partition_alloc.\n\u003e\n\u003e Added span.h and span_unittests.cc with their dependencies.\n\u003e\n\u003e Design doc: go/partition-alloc-spanification\n\u003e BYPASS_RECITATION_REASON\u003dInternal file copy from base to partition_alloc\n\u003e\n\u003e Bug: 481768474\n\u003e Bypass-Check-License: Moved files without licence changes.\n\u003e Change-Id: I214b046ab46ab59053b03e8ed7a473a0b238b906\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7517264\n\u003e Reviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Commit-Queue: Sergio Solano \u003csergiosolano@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1605946}\n\nBug: 481768474\nBypass-Check-License: Moved files without licence changes.\nChange-Id: I4ea55e9a9ba6c091aaa1ab3118279f145680ee46\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7706870\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1606987}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 39edeb9bd1c73f850a318dbe3aa3385ab62af1ad\n" }, { "commit": "3b21b53f577117db1fcbe80558f85e474e4f2f12", "tree": "a5b40271739a09a4b403dada626bf24e75cb407e", "parents": [ "014a13780577e1cb5161d816543b5af4ce4b1fec" ], "author": { "name": "Ken Okada", "email": "kenoss@chromium.org", "time": "Fri Mar 27 06:55:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 27 06:58:06 2026" }, "message": "Revert \"Making span.h available within partition_alloc.\"\n\nThis reverts commit 2277b42429420bf32aed450f0e6ab42910a2d7ad.\n\nReason for revert: PASpanTest.Example_UnsafeBuffersPatterns fails on Linux UBSan Tests https://ci.chromium.org/ui/p/chromium/builders/ci/Linux%20UBSan%20Tests/14752/overview\n\nOriginal change\u0027s description:\n\u003e Making span.h available within partition_alloc.\n\u003e\n\u003e Added span.h and span_unittests.cc with their dependencies.\n\u003e\n\u003e Design doc: go/partition-alloc-spanification\n\u003e BYPASS_RECITATION_REASON\u003dInternal file copy from base to partition_alloc\n\u003e\n\u003e Bug: 481768474\n\u003e Bypass-Check-License: Moved files without licence changes.\n\u003e Change-Id: I214b046ab46ab59053b03e8ed7a473a0b238b906\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7517264\n\u003e Reviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Commit-Queue: Sergio Solano \u003csergiosolano@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1605946}\n\nBug: 481768474\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I0b4e87c90fa7a999ee7db8b981669e71391bbdf0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7707016\nOwners-Override: Ken Okada \u003ckenoss@chromium.org\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCommit-Queue: Ken Okada \u003ckenoss@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1605995}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 39bd962b58821e1bc07c039e9066e64024b0c11b\n" }, { "commit": "014a13780577e1cb5161d816543b5af4ce4b1fec", "tree": "fcaee335379ebb08de8c1f1fe59d2af0344e7a25", "parents": [ "ce50faac4317e6786737bfabac855e8ae81577a1" ], "author": { "name": "Sergio Solano", "email": "sergiosolano@google.com", "time": "Fri Mar 27 03:06:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 27 03:07:49 2026" }, "message": "Making span.h available within partition_alloc.\n\nAdded span.h and span_unittests.cc with their dependencies.\n\nDesign doc: go/partition-alloc-spanification\nBYPASS_RECITATION_REASON\u003dInternal file copy from base to partition_alloc\n\nBug: 481768474\nBypass-Check-License: Moved files without licence changes.\nChange-Id: I214b046ab46ab59053b03e8ed7a473a0b238b906\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7517264\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Sergio Solano \u003csergiosolano@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1605946}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2277b42429420bf32aed450f0e6ab42910a2d7ad\n" }, { "commit": "ce50faac4317e6786737bfabac855e8ae81577a1", "tree": "a5b40271739a09a4b403dada626bf24e75cb407e", "parents": [ "d177d709848ce54ad3edceb17f5f60b8d043e687" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Thu Mar 26 07:37:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 07:40:16 2026" }, "message": "Refactor aligned allocation/free for memory tools.\n\nThis change moves the logic for using platform-specific aligned\nallocation and free functions when MEMORY_TOOL_REPLACES_ALLOCATOR is\ndefined from blink/renderer/platform/wtf/allocator/partitions.cc into\nPartitionAlloc\u0027s internal implementation. New internal flags,\nkAlignedAllocForMemoryTool and kAlignedFreeForMemoryTool, are introduced\nto signal when these special aligned functions should be used within\nPartitionRoot::AllocInternal and PartitionRoot::FreeInline. This ensures\nthat PartitionAlloc\u0027s AlignedAlloc and a new AlignedFree method\ncorrectly handle aligned allocations even when a memory tool replaces\nthe allocator.\n\nSee crrev.com/c/7624386 \u0026 crbug.com/487660033 for context\n\nBug: 487660033\n\nChange-Id: I45f72a9580c4dd0a41ea39f6732b85f164683d00\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7641689\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1605298}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0845b91ed692e2b55792119fbc5f00e6a88bcbab\n" }, { "commit": "d177d709848ce54ad3edceb17f5f60b8d043e687", "tree": "e870737c01622bd1f0e202709cf00f155106acc5", "parents": [ "ad516b327b0d4b30694bcb19ccaddcaf48da39ba" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Thu Mar 26 07:22:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 26 07:24:49 2026" }, "message": "PA: Expose `IsExtentInBounds()`\n\nThis CL introduces `IsExtentInBounds()`, which doesn\u0027t require the\ncaller to do any bytewise calculation at call site.\n\nNote that we can\u0027t just replace the existing `IsExtentOutOfBounds()`:\nthe function definition is out-of-line to avoid an inclusion cycle with\ninternal PartitionAlloc structs, and the newly introduced version is\ntemplated (and so all its internals are laid bare anyway).\n\nBug: 484171909\nChange-Id: If127394b56951b982be401927d445a42a02e2ef8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7699526\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1605296}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 38f5872e95822fc42c766c22e13617b1f21d4d86\n" }, { "commit": "ad516b327b0d4b30694bcb19ccaddcaf48da39ba", "tree": "e202cdc8e125a2810646374c8c8c8c019cf6856d", "parents": [ "b7130e4a2bd11e4fd33bdc95c84384e37bee7e4d" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Wed Mar 25 06:44:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 25 06:46:27 2026" }, "message": "Checked Span: Expose `IsExtentOutOfBounds()`\n\nIndependently of `PA_BUILDFLAG(CHECKED_SPAN)`, we may want to use\n`IsExtentOutOfBounds()`. This CL maneuvers the plumbing inside `span.h`\nto tie the actual mechanics of Checked Span to the buildflag, but\nallowing arbitrary callers to use `IsExtentOutOfBounds()`.\n\nNote that the (checked) constructors of `base::span` remain the only\nconsumers of `IsExtentOutOfBounds()` at this time, and they are gated on\nthe currently disabled buildflag for Checked Span. Therefore, this CL\ndoes not introduce any behavioral change.\n\nBug: 484171909\nChange-Id: Idd35c686f27578c4d1f4597a3ba56eb3203c2305\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7696096\nReviewed-by: Wez \u003cwez@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1604616}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 76b9135ee86c7d555fbd75aab67ac60b599f2185\n" }, { "commit": "b7130e4a2bd11e4fd33bdc95c84384e37bee7e4d", "tree": "fbfe5cd4a60ea3e68a7772cb452bf83fe9aafe02", "parents": [ "71cba75560ca34042791135b8d32eabe21f09ddb" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Wed Mar 25 01:56:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 25 01:57:56 2026" }, "message": "Convert #pragma allow_unsafe_* to PA_UNSAFE_TODO [2/4] (pointers)\n\nThis removes the #ifdef UNSAFE_BUFFERS_BUILD blocks from\nbase/allocator/partition_allocator/src and wraps the newly exposed\nunsafe buffer accesses with PA_UNSAFE_TODO() macros to allow the\nbuild to succeed.\n\nBug: 40284755\nChange-Id: Ia9058e72f5b83528bf7bfbdbb0c7cb206fda2a03\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7691239\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1604546}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 18fa7ccf1d1c5e9ed157b539cf1d181abab0e99b\n" }, { "commit": "71cba75560ca34042791135b8d32eabe21f09ddb", "tree": "68947afc17e5ae89f1523e055f2223f53d475b5c", "parents": [ "e1e3fc2cf70bf2f61fbef853eafac477fd10be30" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Tue Mar 24 14:19:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 24 14:21:33 2026" }, "message": "Convert #pragma allow_unsafe_* to PA_UNSAFE_TODO [3/4] (base util)\n\nThis removes the #ifdef UNSAFE_BUFFERS_BUILD blocks from\nbase/allocator/partition_allocator/src and wraps the newly exposed\nunsafe buffer accesses with PA_UNSAFE_TODO() macros to allow the\nbuild to succeed.\n\nBug: 40284755\nChange-Id: I3c9b33d2defd632dd60bd1baa35083f6eee65323\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7691657\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1604102}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: aca114119e9893e5253f6342f8c15f20831fec4f\n" }, { "commit": "e1e3fc2cf70bf2f61fbef853eafac477fd10be30", "tree": "a82f6d1381d0cb8325b74b67abb7230e8242c0b5", "parents": [ "0453d0dbe40f9a4283304c9c106da4c605b59d89" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Tue Mar 24 14:01:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 24 14:03:19 2026" }, "message": "Convert #pragma allow_unsafe_* to PA_UNSAFE_TODO [1/4] (unittest)\n\nThis removes the #ifdef UNSAFE_BUFFERS_BUILD blocks from\nbase/allocator/partition_allocator/src and wraps the newly exposed\nunsafe buffer accesses with PA_UNSAFE_TODO() macros to allow the\nbuild to succeed.\n\nBug: 40284755\nChange-Id: Ia84f8a3cf526483dbffe0ec79519d0106c41fecb\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7691656\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1604090}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: abd5aa44343a0bedc9267d4a78021f27016e97b1\n" }, { "commit": "0453d0dbe40f9a4283304c9c106da4c605b59d89", "tree": "72dce24f36c5f5ed29e90f770e3b6cd843e38d33", "parents": [ "425ceae05822e0263d97830ef56f5af5ac364941" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Tue Mar 24 12:17:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 24 12:20:33 2026" }, "message": "Convert #pragma allow_unsafe_* to PA_UNSAFE_TODO [4/4] (apple/mac)\n\nThis removes the #ifdef UNSAFE_BUFFERS_BUILD blocks from\nbase/allocator/partition_allocator/src and wraps the newly exposed\nunsafe buffer accesses with PA_UNSAFE_TODO() macros to allow the\nbuild to succeed.\n\nBug: 40284755\nChange-Id: I2b8c2783aab09cf4245c0181f0198fe62c8ec979\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7691015\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1604039}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3666a0bb9b7f1c12eb0db80f50531ffd3856a6dc\n" }, { "commit": "425ceae05822e0263d97830ef56f5af5ac364941", "tree": "3acd8ffde92e9999c7707f0ce1c338f869428f1d", "parents": [ "cc3844050c2d0de4cb03629749fc51590a645c46" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Mon Mar 23 10:03:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 23 10:06:36 2026" }, "message": "Remove #pragma allow_unsafe_buffers and add PA_UNSAFE_TODO annotations.\n\nThis change removes the #pragma allow_unsafe_buffers from several\nallocator shim files. Instead of a blanket allowance, specific\npotentially unsafe buffer operations are now wrapped with\nPA_UNSAFE_TODO() to highlight areas needing future review for buffer\nsafety.\n\nPreviously a couple Apple/Window specific files were missed.\n\nChange-Id: Idf2384cc537439e219c4e97832386d4f4d3d88d7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7692652\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1603341}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a1d71cc9284e11d690debe65a3cf108941782598\n" }, { "commit": "cc3844050c2d0de4cb03629749fc51590a645c46", "tree": "2f44a37030b50ff81ca79bac3528568e97bc767a", "parents": [ "2157c84d9a0d075c1ca31cc120590a9743550647" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Thu Mar 19 13:35:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 19 13:37:55 2026" }, "message": "[base] Use try_emplace for more efficient map insertions\n\nThis CL replaces several instances of emplace() and insert() with\ntry_emplace() across //base.\n\nThis prevents unnecessary construction of the value type if the key is\nalready present in the map (which can further benefit code size by\neliminating the need to run destructors in that case) and simplifies\ncomplex insertions (e.g., removing std::piecewise_construct boilerplate\nin file_path_watcher_win.cc).\n\nChange-Id: Idd5c7bd4eb8fd9df8d21f25d8651c072f19228d5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7663154\nCommit-Queue: Andrew Paseltiner \u003capaseltiner@chromium.org\u003e\nReviewed-by: Gabriel Charette \u003cgab@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1601927}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ca804d1e5b6c8e3f85e80d69e68147c6e7983c43\n" }, { "commit": "2157c84d9a0d075c1ca31cc120590a9743550647", "tree": "bfe8322256a45bb235f5233b2021eb5bc10557cd", "parents": [ "ce5e3aaabfb35f024fdb946d5c45b9c31419b797" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Mar 10 03:44:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 10 03:50:22 2026" }, "message": "PA: Further split `bounds_checks`\n\nTo reduce header exposure in `span.h`, move `SlotAddressAndSize` out\ninto its own header and implementation. This should save us ~500 MiB of\nbloat.\n\nBug: 488206062\nChange-Id: I08dbb0a439eaecd9c4419b1b37e0d982aa9cf2ed\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7642912\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1596822}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f2e8255d5eace7646e8f394a45a81315d5112118\n" }, { "commit": "ce5e3aaabfb35f024fdb946d5c45b9c31419b797", "tree": "6e0dcaecd2c721404bcc0f94c11b16bbadb98ef8", "parents": [ "46efd4d0ef7727ead34d1ee15fb4e10eb1574a98" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Mar 10 00:32:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 10 00:38:11 2026" }, "message": "PA: Reduce `partition_lock.h` exposure\n\nThis CL moves the inclusion of `partition_lock.h` into the\nimplementation of `partition_dcheck_helper` where it belongs (gated\nbehind \"is DCHECK on\" conditions).\n\nNote --- this contributed ~5.3 GiB of bloat when this `#include` was\nexposed to `span.h` (via `slot_start.h`).\n\nNote --- this isn\u0027t strictly necessary for Checked Span, since primarily\nwe hope to save by further slimming down `bounds_check.h`.\n\nBug: 488206062\nChange-Id: I946fb46f4afce0f85f3c3d5959e4382168142b7f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7642911\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1596733}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 10597f56a52f70cd47870f7b1d4908c50367ccf3\n" }, { "commit": "46efd4d0ef7727ead34d1ee15fb4e10eb1574a98", "tree": "b2603016f1fd2541040348531e8436ae4981a79c", "parents": [ "ea524bd226a413e443fc79d8a9e65d8025929a88" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Mar 06 09:55:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 06 10:00:40 2026" }, "message": "PA: Introduce `SlotAddressAndSize::From()`\n\nThis CL is motivated by wanting to implement Checked Span. It does\nmultiple things:\n\n* Move `*GetSlotStartAndSizeInBRPPool()` functions to be static\n constructors of `SlotAddressAndSize()` --- namely `From()`.\n\n* Stop gating these functions and structs on BRP build support (as\n Checked Span is intended to be BRP-agnostic).\n\n* Create convenience wrappers for BRP-exclusive use cases.\n\n* Move these functions and structs to a new file. They depend\n primarily on some core PA structs, but it\u0027s not as though\n `PartitionRoot` depends directly on these. (Unfortunately,\n in some cases it helps to have `PartitionRoot` fully defined.)\n\nBug: 484171909\nChange-Id: Id7e9dd24645af6105fe5f06458d89bfaa0d9a2e1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7619944\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1595265}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4ce98478289e1f39f3861af0d77930fd02b14312\n" }, { "commit": "ea524bd226a413e443fc79d8a9e65d8025929a88", "tree": "8dedff230dc52e8454d8773018b5bfef0b434917", "parents": [ "ba4f58649c1f04dd2ceca6a64b59c627771375ca" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Fri Mar 06 08:50:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 06 08:56:11 2026" }, "message": "Allow SchedulerLoopQuarantine::Configure to run while paused.\n\nThe SchedulerLoopQuarantine::Configure method can be called while the\nquarantine is paused by a ScopedQuarantineExclusion. This happens\nbecause ScopedSafetyChecksExclusion, which uses\nScopedQuarantineExclusion, is not aware of whether the quarantine\nfeature is fully enabled or not. The previous PA_CHECK(pause_quarantine_\n\u003d\u003d 0) in Configure was too strict and caused crashes when a navigation\noccurred while safety checks were excluded.\n\nThis change removes the strict check in Configure and adds a regression\ntest to ensure that configuring the quarantine while it is paused by a\nScopedSafetyChecksExclusion does not cause a crash.\n\nBug: 489892198\nChange-Id: Iac105d589331a8dea3b754bdb03564f314d38b0e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7641011\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1595238}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7bc9c7359d42650a795b10d577c4795855442981\n" }, { "commit": "ba4f58649c1f04dd2ceca6a64b59c627771375ca", "tree": "cee837271bdf7c84746c19c5eacabbad8018350f", "parents": [ "d8992aa4f0bd379f288fa2891a8b3b4bbb947d3d" ], "author": { "name": "François Doray", "email": "fdoray@chromium.org", "time": "Thu Mar 05 16:57:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 05 17:01:55 2026" }, "message": "Add features to avoid walking the free list in \"background\" memory dumps.\n\nBased on joenotcharles@\u0027s analysis, MallocDumpProvider and\nPartitionAllocMemoryDumpProvider are the slowest memory dump providers.\nThey happen to walk the free list to report \"discardable bytes\" stats.\nWhen we are in a \"background\" memory dump request coming from\nProcessMemoryMetricsEmitter (responsible for reporting most of Chrome\u0027s\nmemory metrics), these stats are not used.\n\nThis CL adds features to skip populating \"discardable bytes\" as part of\na \"background\" memory dump request, so that we can avoid walking the\nfree list.\n\nChange-Id: I7a8103d78a666d2bfc90e6510620022a6f942d36\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7635178\nReviewed-by: Joe Mason \u003cjoenotcharles@google.com\u003e\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nCommit-Queue: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1594734}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9779d545d096b1f55a12c7d76963caeb139437d9\n" }, { "commit": "d8992aa4f0bd379f288fa2891a8b3b4bbb947d3d", "tree": "d7dd597f17c795a974f731497f0c039dc3f25662", "parents": [ "33a4e899c010d19f5028095327b5873109d494a1" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Wed Mar 04 10:04:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 04 10:09:49 2026" }, "message": "[PA/AC] disable all work in-between tasks\n\nDuring non-task related work we aren\u0027t claiming any security properties\nof MiracleObject for our current Browser UI thread launch. However\nbecause of the current implementation on the quarantine and zapping\ncontinue to function providing hardening benefits (more crashes) but\nunclear security promises (due to zapping hardening things but with\nenough allocations/freeing a pointer could be purged from the quarantine\nand exploited).\n\nThus to avoid performance overhead we can instead disable the quarantine\nwhen we aren\u0027t explicitly processing a task.\n\nChange-Id: Ie19c6547f4627f4ffa079891ac46e7c91d4c394d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7619852\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1593799}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 87117779063f7c4f1cd835b370a4322f0ee401e4\n" }, { "commit": "33a4e899c010d19f5028095327b5873109d494a1", "tree": "b93e9d77efc0a45763f1c45eece600a46f137d54", "parents": [ "75a7e547a973591d20fc17375d68b6af14d5424d" ], "author": { "name": "Kevin Lin", "email": "kevinptt@chromium.org", "time": "Tue Mar 03 06:39:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 03 06:45:52 2026" }, "message": "Add [[maybe_unused]] to wrapped_ptr in RawPtrNoOpImpl::ReleaseWrappedPtr.\n\nThis silences compiler warnings about the unused parameter in the no-op implementation, especially when the MSAN check is skipped.\n\nBug: None\nTest: CQ\nChange-Id: I146d5ad5e99f26c3ad5dfa36034d7bf5279f9e41\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7620494\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nCommit-Queue: Kevin Lin \u003ckevinptt@chromium.org\u003e\nReviewed-by: Hans Wennborg \u003chans@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1593015}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a178d432c34a547f4d071e4845f0e6c0b5bf3e2b\n" }, { "commit": "75a7e547a973591d20fc17375d68b6af14d5424d", "tree": "977ca7a1ece96a5c5077dd7abaf5125ec7b23dac", "parents": [ "5fc2a1301040fdaa2638b18854184b784389dd50" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Tue Mar 03 04:00:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 03 04:08:07 2026" }, "message": "[Code Health] Clean up PA_CONFIG checks into helper function\n\nCurrently whenever accessing we need to sprinkle some PA_CONFIG and\neither compute the metadata or set it to 0, this causes a lot of code to\nhave to think about this and if they need the offset or just 0.\n\nWe fix this by updating the helper functions that know how to get the\noffsets to just return 0 when it is not configured. With\nPA_ALWAYS_INLINE the compiler should be able to optimize as efficiently\nas before and the code is more readable.\n\nChange-Id: Id3a8d5ff192aa357a78fc4e8653c86eb12d29a75\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7610474\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1592972}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 95893eafd123b66a18e1ad31650f766a7a1eca8d\n" }, { "commit": "5fc2a1301040fdaa2638b18854184b784389dd50", "tree": "011394d6b461710b0d1dd633bd82e360f16f8b25", "parents": [ "0874488b363d90e0d99fe14d6837d6b9a1922143" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Mon Mar 02 02:39:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 02 02:46:54 2026" }, "message": "[PA] Fix ThreadCache IsInitialized logic\n\n`ThreadCache::IsInitialized()` was incorrect. It now correctly checks\nthe default root within the `g_thread_cache_roots` array and verifies\nthat the `with_thread_cache` setting is enabled.\n\nChange-Id: I2ca0302e945d18a03b53089429c675c9f91d43e9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7591513\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1592222}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 77f144bdad221a81a6078f75a5975008408d9817\n" }, { "commit": "0874488b363d90e0d99fe14d6837d6b9a1922143", "tree": "157934a84b3cbfa4b33cd9668a172d2ee67f652e", "parents": [ "edddede6485c1d7247e7e4e1bb4ea2cb6232409d" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Fri Feb 27 08:24:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 27 08:30:01 2026" }, "message": "PA: Remove `partition_alloc_buildflags`\n\nThe comment states that Dawn and PDFium are the last holdouts, but:\n\n```\nthird_party/dawn$ rg \"partition_alloc_buildflags\" || echo hmmm\nhmmm\nthird_party/dawn$ git log -n1 --pretty\u003doneline\n307f5dce0dd5eb2ec90eb11670970ef2cf86bcf7\n (HEAD, origin/chromium/7703)\n [ir] Add missing non-deterministic evaluation order checks\n```\n\nAnd PDFium will have been sorted with\nhttps://pdfium-review.googlesource.com/143750\nrolled into Chromium in\nhttps://crrev.com/c/7610742\n\nBug: 41481467\nChange-Id: Ib6390b97cd9c425b3af20ea3b182d08397c4a264\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7611070\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1591375}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ce0d81f41106af25d91488274f2465b72fd65379\n" }, { "commit": "edddede6485c1d7247e7e4e1bb4ea2cb6232409d", "tree": "f889c21a1285bdec9c5fbfc5051f3b7412007f26", "parents": [ "6f23011714656aef37c992c50b0fe86bd1b7473d" ], "author": { "name": "Justin Cohen", "email": "justincohen@google.com", "time": "Mon Feb 23 18:14:45 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 23 18:21:42 2026" }, "message": "PartitionAlloc: Clamp ASLR mask to 35 bits on iOS\n\nThe Swift runtime restricts class metadata pointers to 36 bits\n(`SWIFT_ISA_MASK`). While physical iOS devices strictly limit `mmap` to\nthis range, the macOS-based Simulator permits allocations above it. This\ncauses the Swift runtime to silently truncate upper bits, resulting in\n`EXC_BAD_ACCESS`.\n\nFixed: 485868326\nChange-Id: I31ced1aef15db112999ad1f23534c485af42cae3\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7595722\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCommit-Queue: Justin Cohen \u003cjustincohen@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1588793}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: fdce16fb330fab9ce595de4defe67f12d8ef3a38\n" }, { "commit": "6f23011714656aef37c992c50b0fe86bd1b7473d", "tree": "4dc0ed5a254159f20f11fdfe3a3836eb35eaa310", "parents": [ "3e4a61857bc46764ca1fca6fd955128ae31211e3" ], "author": { "name": "Hans Wennborg", "email": "hans@chromium.org", "time": "Fri Feb 20 11:15:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 20 11:22:04 2026" }, "message": "Enable MSan to catch use-after-destruct of raw_ptr\u0027s\n\nthis would have caught the issue fixed in https://crrev.com/1586527\n(see bug for details) and potential similar issues -- such as those\nhinted at in raw.ptr.h:442 \"Work around external issues where raw_ptr\nis used after destruction.\"\n\nBug: 484257596\nChange-Id: I5c52afd104cfca8aa58384b2d40bb7b00ea92661\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7592757\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Hans Wennborg \u003chans@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1587720}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e7c2d69fbc5eb2c0dcb7ffb6847632954b29f6fa\n" }, { "commit": "3e4a61857bc46764ca1fca6fd955128ae31211e3", "tree": "a4358abb9d3013a413e82250605a69994296f22c", "parents": [ "fa33ce3e7acb5ed1a48e9a7fd579c498a828f4a6" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Feb 19 15:47:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Feb 19 15:54:42 2026" }, "message": "Revert \"Launch MiraclePtr on Renderer for IS_DESKTOP_ANDROID.\"\n\nThis reverts commit b87a6d2e30c48001b1c51db44bfb130953cea898.\n\nReason for revert: `is_desktop_android` is not allowed\nneither in partition_alloc, nor in chrome. See:\nhttps://chromium-review.googlesource.com/c/chromium/src/+/7547999/comment/7d646b43_0d3e9f0a/\n\nOriginal change\u0027s description:\n\u003e Launch MiraclePtr on Renderer for IS_DESKTOP_ANDROID.\n\u003e\n\u003e This is launched on all platforms but Android, but IS_DESKTOP_ANDROID\n\u003e isn\u0027t yet fully launched. It should default to the higher protection\n\u003e rather than be disabled due to the same reasons as ANDROID.\n\u003e\n\u003e Bug: 482155132\n\u003e Change-Id: I38f82af8c2661997abc14f7cfd741e77d3d8e286\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7547999\n\u003e Reviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\n\u003e Commit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1581541}\n\nBug: 482155132\nChange-Id: I616a2b5a6ea05d60a3f5ebfeea7fb923595f173b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7560182\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1587127}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0488966cbdf905a69c3053d61d94c1192702d68b\n" }, { "commit": "fa33ce3e7acb5ed1a48e9a7fd579c498a828f4a6", "tree": "b8fe02fb950856cf8fcf01c83ca623a9afe6c58d", "parents": [ "b9d4176d40f2f7cabb8fd561546be6255e442fda" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Feb 17 06:25:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Feb 17 06:31:02 2026" }, "message": "Drive-by: Reorganize `stack_scan_supported`\n\n`stack_scan_supported` has no users outside the primary PartitionAlloc\n`BUILD.gn`. Move it inline closer to its site of use. Additionally,\nslightly simplify the incantation to actually add the source file.\n\nChange-Id: I254473e207b851cffa0573428b3e1254c999e4d7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7581115\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1585568}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 713ff10b174c23668b32d68f71c3a039540a6965\n" }, { "commit": "b9d4176d40f2f7cabb8fd561546be6255e442fda", "tree": "c3ce291307df4e87946cdd0ca0b6f335e79ac823", "parents": [ "008e4fdd7e31d9133d028659348e054d350ccc3e" ], "author": { "name": "Alex Gough", "email": "ajgo@chromium.org", "time": "Mon Feb 16 03:43:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 16 03:49:48 2026" }, "message": "Tidy empty #if sections in base/allocator/partition_allocator\n\nTidies empty preprocessor directives with no functional changes.\n\nThis CL was uploaded by git cl split.\n\nR\u003dnuskos@chromium.org\n\nBug: n/a\nChange-Id: If828e5e121e9254c42f42037541b8987b1f5c371\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7561796\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Alex Gough \u003cajgo@chromium.org\u003e\nCommit-Queue: Alex Gough \u003cajgo@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1585257}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3ed5db5f4b0a33f435af2c48c757b61c4810a4e3\n" }, { "commit": "008e4fdd7e31d9133d028659348e054d350ccc3e", "tree": "34404bbe3cb58888b1f2bd30550dae50f6629738", "parents": [ "51b41d1d8503d591014d98df29bdd94db18279a9" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Mon Feb 09 07:56:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 09 08:02:27 2026" }, "message": "[PA/MO] Allow ScopedSchedulerLoopQuarantine* utility use in early init\n\nThere are some cases we hit `PA_CHECK(ThreadCache::IsValid(tcache))`\nbecause `ScopedSchedulerLoopQuarantineDisallowScanlessPurge` is used\nbefore `ThreadCache::Init` call. This CL introduced initialization check\nto support use of the utility before initialization.\n\nBug: 351974425\nChange-Id: Ieb720754045d06928cfe128dcd40f8fc7b0467e2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7532816\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1581563}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7ad475ae91a7da1602985f2f789a5440540ddb73\n" }, { "commit": "51b41d1d8503d591014d98df29bdd94db18279a9", "tree": "8bd2f93427770c6307ec9f37810a3f299ebfc12d", "parents": [ "b8c0688f577c1bbce6c2c1ce4753cd685ca0f634" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Mon Feb 09 06:41:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 09 06:45:56 2026" }, "message": "Launch MiraclePtr on Renderer for IS_DESKTOP_ANDROID.\n\nThis is launched on all platforms but Android, but IS_DESKTOP_ANDROID\nisn\u0027t yet fully launched. It should default to the higher protection\nrather than be disabled due to the same reasons as ANDROID.\n\nBug: 482155132\nChange-Id: I38f82af8c2661997abc14f7cfd741e77d3d8e286\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7547999\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1581541}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b87a6d2e30c48001b1c51db44bfb130953cea898\n" }, { "commit": "b8c0688f577c1bbce6c2c1ce4753cd685ca0f634", "tree": "e221f46decf556d0cde458490b7c28cb0aabbc4f", "parents": [ "7289d97695f40ba6a8ae56618d45786eadffdc7b" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Mon Feb 09 06:16:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 09 06:23:36 2026" }, "message": "PartitionAlloc: Improve compatibility with Skia.\n\nResolve a couple a extra warning displayed when using PartitionAlloc in\nSkia. This is due to Skia enabling additional warning and also some\ndifferences due to GCC.\n\nBug: 351867706\nChange-Id: Ide6163643cca391f852118fcb5686d14f0555e52\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7545061\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1581537}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bc65cd2fd75a7117708efefde3d278602d6a77a0\n" }, { "commit": "7289d97695f40ba6a8ae56618d45786eadffdc7b", "tree": "beb5ddd4a9f3301f1e055a4e96c375d8d2c86884", "parents": [ "bb5a3e33f5ea17a2e27059d99b12273b1b1c3604" ], "author": { "name": "Stephen Nusko", "email": "nuskos@chromium.org", "time": "Fri Feb 06 07:00:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 06 07:06:17 2026" }, "message": "Add nuskos@ to PartitionAlloc OWNERS.\n\nChange-Id: Ic636924d969f52d1839c11f2dd628b64bc4f25b9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7550196\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1580623}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e68e712315223a01924f14d73f8d61bc408a3a8c\n" }, { "commit": "bb5a3e33f5ea17a2e27059d99b12273b1b1c3604", "tree": "35f0720b58097969d95de7ec3fabed5810098a1b", "parents": [ "24e411a428ae1128d44850dc0b98376da84bddd5" ], "author": { "name": "Yisi Yu", "email": "hellofroser@gmail.com", "time": "Fri Feb 06 00:24:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 06 00:30:18 2026" }, "message": "Fix some PA_UNSAFE_TODOs in //base/allocator/partition_allocator\n\nUse std::array instead of native array.\n\nBug: 40285824\nChange-Id: I652094ad6a36c77bd9cfdd56e8afa772096f581a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7547665\nReviewed-by: Etienne Pierre-Doray \u003cetiennep@chromium.org\u003e\nCommit-Queue: YISI YU \u003chellofroser@gmail.com\u003e\nReviewed-by: Kentaro Hara \u003charaken@chromium.org\u003e\nAuto-Submit: YISI YU \u003chellofroser@gmail.com\u003e\nCr-Commit-Position: refs/heads/main@{#1580490}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 79ff5fc7f3bf1421ce631e6eb3aabf13d4510f4a\n" }, { "commit": "24e411a428ae1128d44850dc0b98376da84bddd5", "tree": "44ddf935258d2dbd092738b256d70950db342996", "parents": [ "f9fe9152fca91e24bfc495f91b42a36800b952a0" ], "author": { "name": "Takashi Sakamoto", "email": "tasak@google.com", "time": "Wed Feb 04 07:00:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Feb 04 07:07:46 2026" }, "message": "[3/4] Implement AsanRawPtrService V2\n\n- A part of crrev.com/c/7081651\n- Update AsanRawPtrService to support V2. The V2 is guarded by\nPA_BUILDFLAG(USE_ASAN_BACKUP_REF_PTR_V2). The BUILDFLAG is true when gn\nvariable: use_asan_backup_ref_ptr_v2 is true.\n- Since AsanRawPtrService V2 depends on\n__sanitizer_{malloc,free,ignore_free}_hook(), it is available\n on posix platform.\n\nBYPASS_LARGE_CHANGE_WARNING: only affects ASAN builds, not production binaries.\n\nBug: crbug.com/447520906\nChange-Id: Ibe8e4459ac0dd609d6858dc7ac7dcd0cd53715d4\nCq-Include-Trybots: luci.chromium.try:linux-x64-libfuzzer-asan-rel-tests,linux-libfuzzer-asan-rel\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7208619\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1579251}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9cef672e8c0569269ce40cb2b8bd18bdd9e25029\n" }, { "commit": "f9fe9152fca91e24bfc495f91b42a36800b952a0", "tree": "48612fb513a81bfa76528f8202f7b31b54d9cbba", "parents": [ "baaa6670c23c19485d0a5a538bc43d3332def328" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Tue Feb 03 03:02:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Feb 03 03:09:30 2026" }, "message": "[PA] Refactor and merge PA/AC shim logic\n\nThis patch merges the PartitionAlloc with Advanced Checks shim\ndelegation logic directly into the main PartitionAlloc default dispatch\nfile.\n\nChanges:\n- Merged allocator_shim_default_dispatch_to_partition_alloc_with_advanced_checks.{cc,h}\n into allocator_shim_default_dispatch_to_partition_alloc.{cc,h}.\n- Renamed InstallCustomDispatchForPartitionAllocWithAdvancedChecks to\n InstallPartitionAllocWithAdvancedChecks.\n- Centralized default_dispatch to always be the delegating one when\n USE_PARTITION_ALLOC_AS_MALLOC is true.\n- Simplified namespaces and flattened buildflag checks in partition_alloc_support.cc.\n- Removes the GN arg from partition_alloc.gni.\n- Removes the ENABLE_ALLOCATOR_SHIM_PARTITION_ALLOC_DISPATCH_WITH_ADVANCED_CHECKS_SUPPORT buildflag.\n- Simplifies the build configuration in BUILD.gn.\n- Replaces buildflag usages with USE_PARTITION_ALLOC_AS_MALLOC.\n- Simplifies default dispatch definition in allocator_shim_default_dispatch_to_partition_alloc.cc.\n\nBYPASS_RECITATION_REASON\u003dFalse positive due to moving code?\n\nChange-Id: I9ffcd70c1d136faead40c458d205261788b8053c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7519087\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Ramin Halavati \u003crhalavati@chromium.org\u003e\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1578524}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: babe45ae0924ac77cd45098e57f5077ae064501b\n" }, { "commit": "baaa6670c23c19485d0a5a538bc43d3332def328", "tree": "acd2c22d095e6674927b11a6b6d3437d67adf62a", "parents": [ "4344806135c21081ac9c2551b9d8e26fd1894280" ], "author": { "name": "Andrew Williams", "email": "awillia@chromium.org", "time": "Fri Jan 30 16:02:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jan 30 16:06:52 2026" }, "message": "Fix comment references to \"_unittests.cc\" files (base/)\n\nFollowing up on:\nhttps://chromium-review.googlesource.com/c/chromium/src/+/7510296\n\nUpdate comments in various files incorrectly referred to unit test files\nwith a plural \"unittests.cc\" suffix.\n\n#cleanup\n\nBug: None\nChange-Id: Ieb9af728b92ea70e2ea46aacd8d5d8c9a209a8f5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7522888\nCommit-Queue: Andrew Williams \u003cawillia@chromium.org\u003e\nReviewed-by: Francois Pierre Doray \u003cfdoray@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1577260}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cdfed01946fc25d97b4379bda0ccbb5d680d0771\n" }, { "commit": "4344806135c21081ac9c2551b9d8e26fd1894280", "tree": "71de206cbb4ddac4facf43c95be3bbda122fa407", "parents": [ "936619c71ecb17c0e2482cf86be3f3f417b2f683" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Jan 29 18:01:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jan 29 18:07:38 2026" }, "message": "PartitionAlloc: Do not assert C++20.\n\nThe static assert was a remanent of ASSERT_CPP_20 buildflag.\n\nWe don\u0027t want to assert C++20, because some compilers that do support\nmost of C++20 like GCC10 are still reporting 201709 despite the\n--std\u003dc++20.\n\nSee [godbolt](https://godbolt.org/z/ozoT4vEdr)\nSee [Kaylee discussion](https://skia-review.googlesource.com/c/skia/+/874976/comment/ac2baac2_1de3ecba/)\n\nBug: 351867706\nChange-Id: Idce336ad91be83f6c1c054b51d693b7475853b02\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7526908\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1576688}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8794d8f92f1fd326a998e9cd1f02fb3774f1b53f\n" }, { "commit": "936619c71ecb17c0e2482cf86be3f3f417b2f683", "tree": "de2b087aa3d47f413a653c8c6e8cb2db1f2913e0", "parents": [ "492f8c119a98911c17bdfc1559b10b6431ea419d" ], "author": { "name": "Ayumi Ono", "email": "ayumiohno@google.com", "time": "Tue Jan 27 18:19:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 27 18:26:35 2026" }, "message": "PA: Implement AllocToken support in PartitionAlloc\n\nThis CL integrates LLVM\u0027s AllocToken feature into PartitionAlloc. This\nfeature enables the compiler to inject a type-derived \"alloc token\" into\nallocation calls.\n\nThe key modifications include:\n- AllocatorDispatch API Update: Allocation and reallocation function signatures within allocator_dispatch.h now accept an additional `size_t alloc_token` argument.\n- AllocToken Symbols: New symbols __alloc_token_malloc and so on are defined.\n- Multiple PartitionRoots: `PartitionAllocFunctionsInternal` is refactored to manage two partition roots, selected by alloc_token.\n- Build Configuration: A new `config(\"alloc_token\")` enables the necessary Clang and linker flags.\n\nChange-Id: I8f9bef3a84a4debcda3647c59ef0c671cb02bd85\nBug: 477186304\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7396999\nReviewed-by: Sergei Glazunov \u003cglazunov@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1575347}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 150979b30b232291e2efc8de7114caadda909920\n" }, { "commit": "492f8c119a98911c17bdfc1559b10b6431ea419d", "tree": "6d56c2de22ee761e51daf7bccad6529c46c0ec0a", "parents": [ "e1b3bee8ba37d08bb642265ccb78e54cedd00a77" ], "author": { "name": "Kevin McNee", "email": "mcnee@chromium.org", "time": "Tue Jan 27 17:27:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 27 17:32:06 2026" }, "message": "Prepare for making BindOnce and BindRepeating nodiscard\n\nThis helps avoid, for example, creating a callback and forgetting to\npass it to the intended function.\n\nThere is an existing case of this in NativeWinAppFetcherImpl\nwhich this CL also fixes.\n\nBug: None\nChange-Id: I8c78d7384113a55f9c82756f5938dce1421b505e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7509258\nCommit-Queue: Daniel Cheng \u003cdcheng@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1575303}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dedcec803494c241c48da408a116e6c612fc653d\n" }, { "commit": "e1b3bee8ba37d08bb642265ccb78e54cedd00a77", "tree": "fda830363665b121dda738465b405a39dcbc92c7", "parents": [ "f7b856afab03e211acdfef1467992e98c274d13b" ], "author": { "name": "Sylvain Defresne", "email": "sdefresne@chromium.org", "time": "Tue Jan 27 14:28:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 27 14:33:46 2026" }, "message": "Add transparent version of std::equal_to\u003c\u003e and std::hash\u003c\u003e for raw_ptr\n\nIn order to have heterogenous key support with absl::flat_hash_set\u003c\u003e,\nwrite version of std::equal_to\u003c\u003e and std::hash\u003c\u003e that are transparent\nand work with raw_ptr\u003cT, RawPtrTraits\u003e.\n\nBug: 477014186, 453998692\nChange-Id: I1e990e057dc208b6325aa8db707bc91b520e159d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7511026\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCommit-Queue: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1575187}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 21c36ff02badbe6eee1f72325f5188fdd5943bb8\n" }, { "commit": "f7b856afab03e211acdfef1467992e98c274d13b", "tree": "3609ed1f07f5bbc939d93bd776f8fa9a2673f953", "parents": [ "1e050ef1abfc2d85451625b1f257eba703670a65" ], "author": { "name": "mikt", "email": "mikt@google.com", "time": "Tue Jan 27 08:41:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 27 08:49:06 2026" }, "message": "Reland \"[PA] Make PartitionRoot a class\"\n\nThis reverts commit e260315ba2f64b827705e4355891f92920ce3e7d.\n\nReason for revert: Failure fixed; see diff from PS1\n\nOriginal change\u0027s description:\n\u003e Revert \"[PA] Make PartitionRoot a class\"\n\u003e\n\u003e This reverts commit 51c088b1846e62d2709c62139ecb402cf476ed46.\n\u003e\n\u003e Reason for revert: Change is suspected to cause build failures.\n\u003e https://ci.chromium.org/ui/p/chromium/builders/ci/linux-extended-tracing-rel/100068/blamelist\n\u003e\n\u003e Original change\u0027s description:\n\u003e \u003e [PA] Make PartitionRoot a class\n\u003e \u003e\n\u003e \u003e `PartitionRoot` is one of the most complex type within PartitionAlloc,\n\u003e \u003e with non-trivial constructors and a destructor. It is not simple enough\n\u003e \u003e to be a struct, hence changing to a class.\n\u003e \u003e\n\u003e \u003e This change also introduces trailing underscores to its member variable\n\u003e \u003e names.\n\u003e \u003e\n\u003e \u003e Fuchsia-Binary-Size: Pure refactoring.\n\u003e \u003e Change-Id: Id344859356522e7bec6b9207b9cc94819a67eabe\n\u003e \u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7364660\n\u003e \u003e Reviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\n\u003e \u003e Commit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\n\u003e \u003e Cr-Commit-Position: refs/heads/main@{#1568957}\n\u003e\n\u003e No-Presubmit: true\n\u003e No-Tree-Checks: true\n\u003e No-Try: true\n\u003e Change-Id: I22c22203ed6f26fdc7fac6fd662d7b7de3c82a82\n\u003e Bug: 7364660\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7461033\n\u003e Reviewed-by: Matthias Körber \u003ckoerber@google.com\u003e\n\u003e Owners-Override: Matthias Körber \u003ckoerber@google.com\u003e\n\u003e Auto-Submit: Matthias Körber \u003ckoerber@google.com\u003e\n\u003e Commit-Queue: Matthias Körber \u003ckoerber@google.com\u003e\n\u003e Bot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1568964}\n\nCq-Include-Trybots: luci.chromium.try:linux-extended-tracing-rel\nBug: 475729821\nChange-Id: I08bfaa4bbfcce9586177d7116ab6c8cdc8b8b48b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7501136\nCommit-Queue: Mikihito Matsuura \u003cmikt@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1575048}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4c9f31db6b9d8d8ca9d3036be16bd00425e5a2cb\n" }, { "commit": "1e050ef1abfc2d85451625b1f257eba703670a65", "tree": "4c52625f6c1430fff5bc736984a22baeacd01e7b", "parents": [ "6ad9a9a880baebe89850beec18ebd506419b18af" ], "author": { "name": "Ayumi Ono", "email": "ayumiohno@google.com", "time": "Mon Jan 26 08:22:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jan 26 08:28:10 2026" }, "message": "PA: Remove __throw_out_of_range in address_pool_manager\n\nAddressPoolManager uses bitset::set, bitset::reset(size_t), and\nbitset::test. These methods invoke std::__throw_out_of_range on bound\ncheck failure.\n\nThis introduces an unexpected dependency on std::__throw_out_of_range in\naddress_pool_manager.o, which causes a symbol conflict in\nbreakpad_unittests, due to duplicate definitions when linking\nPartitionAlloc (example:\nhttps://ci.chromium.org/ui/p/chromium/builders/try/mac-official/6700/overview).\n\nThis CL switches to using bitset::operator[]. Unlike the named methods,\noperator[] uses _LIBCPP_ASSERT_VALID_ELEMENT_ACCESS (assertions),\nthereby eliminating the problematic dependency on\nstd::__throw_out_of_range.\n\nChange-Id: I81cfe0af9e9e40398cc7f2431e80813d46537952\nCq-Include-Trybots: luci.chromium.try:mac-official\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7516078\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Ayumi Ono \u003cayumiohno@google.com\u003e\nCommit-Queue: Ayumi Ono \u003cayumiohno@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1574358}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5fa1fd0b24c310dc6cf7d74f71f88f4b8e65c191\n" }, { "commit": "6ad9a9a880baebe89850beec18ebd506419b18af", "tree": "d75271c03e645aaed579551fc008abff85a5aefa", "parents": [ "329ff99d5d81aca88c066dce706136846abd5553" ], "author": { "name": "Ayumi Ono", "email": "ayumiohno@google.com", "time": "Wed Jan 21 00:31:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jan 21 00:37:07 2026" }, "message": "PA: Remove thread_local in parition_alloc_base PlatformThread::CurrentId\n\nThis change removes the thread_local caching mechanism for thread IDs\nwithin partition_alloc::internal::base::PlatformThread::CurrentId.\n\nWhile base/threading/platform_thread_posix.cc utilizes thread_local for\ncaching, doing so within PartitionAlloc\u0027s context can lead to reentrancy\nissues, because accessing thread_local storage can trigger calls to the\nunderlying memory allocator. This reentrancy was observed to cause\ncrashes, particularly with multiple ThreadCache support, as detailed in\nb/476192650. Here, PlatformThread::CurrentId() is called in the\nThreadCache constructor within ThreadCache::Create.\n\npartition_alloc::internal::base::PlatformThread::CurrentId is called\nrelatively infrequently compared to the general\nbase::PlatformThread::CurrentId.\n- During ThreadCache::Create (a few times per thread, unless we support tens of thread caches per thread).\n- In NotifyThreadCreated/NotifyThreadDestoyed.\n- In GetStackEnd (only when dumping stack trace).\nThus, the performance benefit provided by thread_local is outweighed by\nthe risks associated with potential allocator reentrancy.\n\nBug: 476192650\nChange-Id: Id597dcab3d98462746a80eb8f83a5372c05e424d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7488430\nReviewed-by: Benoit Lize \u003clizeb@chromium.org\u003e\nCommit-Queue: Ayumi Ono \u003cayumiohno@google.com\u003e\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1571955}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 447f4d309c4a18d2123f16004d24e1eadd2c4fd5\n" }, { "commit": "329ff99d5d81aca88c066dce706136846abd5553", "tree": "88e817d79b389e6d7ad4f5d392f93ca9f87d24b4", "parents": [ "cb11b9bc34c2183fa5049a69cd1ea09511289235" ], "author": { "name": "Tom Sepez", "email": "tsepez@google.com", "time": "Tue Jan 20 19:32:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 20 19:38:39 2026" }, "message": "Remove base::MakeClampedNum()\n\nPrefer CTAD which correctly handles mismatch between an explicit\ntype specification (if any) and the actual argument.\n\n-- Invoke to_underlying() on enums.\n-- automated conversion of remaining callers.\n\nChange-Id: I17d96bbaf2bc6a9133a83e21acad99efc762b81b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7487534\nCommit-Queue: Tom Sepez \u003ctsepez@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nOwners-Override: Daniel Cheng \u003cdcheng@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1571784}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b2f670faf832b836d888e0d16b7d73a42b1f4acc\n" }, { "commit": "cb11b9bc34c2183fa5049a69cd1ea09511289235", "tree": "e8e3d9988bdc9eae11e9840f2eb4500705e9b4d1", "parents": [ "a663ade348e34ae02e7db69a51e0a5ab92770372" ], "author": { "name": "Ayumi Ono", "email": "ayumiohno@google.com", "time": "Tue Jan 20 03:43:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 20 03:49:18 2026" }, "message": "PA: Use system allocator in ASan even when kNoHooks.\n\nIf clients directly allocate/deallocate memory via PartitionAlloc while\nmemory sanitizer tools are in use and they don\u0027t specify\nkNoMemoryToolOverride, we should allocate/deallocate the memory via the\nsystem malloc/free. Previously the logic existed but only worked if\nkNoHooks flag was not used.\n\nFinally, in crrev.com/c/7136445, we unintentionally fixed the\ndeallocation side to free with the system allocator even when kNoHooks\nflag was used. This mismatch caused the ASan error reported in\ncrbug.com/473308063.\n\nThis CL modify the allocation side to use system allocator even when\nkNoHooks unless kNoMemoryToolOverride is set.\n\nBug: 473308063\nChange-Id: I8a9d61a5fc748cbb23984a6fa2fc364fe8f8e4de\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7491140\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nCommit-Queue: Ayumi Ono \u003cayumiohno@google.com\u003e\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nReviewed-by: Mikihito Matsuura \u003cmikt@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1571412}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d3897b4382d402588007f95928db873c9f072f66\n" }, { "commit": "a663ade348e34ae02e7db69a51e0a5ab92770372", "tree": "af579189a3e57b85d65b8f13bc915a9aff2896ad", "parents": [ "5b70baa1fd02c684fb68f7dc6fad54decabbcaee" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Mon Jan 19 10:15:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jan 19 10:21:11 2026" }, "message": "PartitionAlloc: Additional C++23 presubmit.\n\nChrome recently dropped C++20 support. Developers started to use C++23.\n\nThis patch strenghten our C++23 ban presubmit to prevent the new wave of\nchange to be merged unexpectely.\n\nPartitionAlloc supports V8, Dawn, Skia, Angle. Those are still\nsupporting C++20.\n\nBug: None\nChange-Id: I5fd882f2ddb48eb76c2d68c8b9257117395c8d61\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7489212\nReviewed-by: Keishi Hattori \u003ckeishi@chromium.org\u003e\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1571044}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0a06950608ca2f503d19dfb80e3f7521f58582d7\n" }, { "commit": "5b70baa1fd02c684fb68f7dc6fad54decabbcaee", "tree": "19fd7bfa5bf61c8675d60b9b93a50245752bec55", "parents": [ "24446349a7656b671465493504dfdcf3f638419a" ], "author": { "name": "Victor Hugo Vianna Silva", "email": "victorvianna@google.com", "time": "Fri Jan 16 06:26:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jan 16 06:33:14 2026" }, "message": "Improve PRESUBMIT against C++23 features in partition alloc\n\nPartition alloc must stay on C++20 for now. The existing presubmit\ncaught C++23 #includes but nothing else. Add a few extra patterns to\navoid issues like the one fixed by crrev.com/c/7483013.\n\nChange-Id: I7f03e21aa99dacf7618cebde97c18682267f4926\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7485076\nReviewed-by: Takashi Sakamoto \u003ctasak@google.com\u003e\nCommit-Queue: Takashi Sakamoto \u003ctasak@google.com\u003e\nAuto-Submit: Victor Vianna \u003cvictorvianna@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1570192}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 557c886b5395b9ebbf9845cfcf12e64fa8fb547f\n" } ], "next": "24446349a7656b671465493504dfdcf3f638419a" }