)]}' { "log": [ { "commit": "8a364120c6491b25f25a99358c0fbce15b381cd8", "tree": "59c5109736f6afffaec8ee6e859c8af941b8ebe1", "parents": [ "46a82a4d20f584a7f25c82e31d6465afd778c3a9" ], "author": { "name": "Tom Anderson", "email": "thomasanderson@chromium.org", "time": "Tue Sep 01 23:40:17 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 01 23:45:03 2026" }, "message": "Update FuzzerSmokeTest expectations in fuzzer_smoke_test.cc\n\nMSAN LibFuzzer targets now succeed without triggering coverage table\nsize mismatch crashes.\n\nCq-Include-Trybots: luci.chromium.try:linux-x64-libfuzzer-msan-rel-tests\nBug: 552026145\nFixed: 544797591, 526656114, 536875721\nCq-Include-Trybots: luci.chromium.try:linux-msan-chained-origins-rel,linux-x64-libfuzzer-msan-rel-tests,linux-msan-no-origins-rel\nChange-Id: Id8bc8cbca37445dd842dc32687423f930b69bed9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8340667\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Thomas Anderson \u003cthomasanderson@chromium.org\u003e\nAuto-Submit: Thomas Anderson \u003cthomasanderson@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1690304}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ba818eb4dbc796a3f3540c2417d4ce75eebbfac7\n" }, { "commit": "46a82a4d20f584a7f25c82e31d6465afd778c3a9", "tree": "bf75adb92529c4b50110a9502fd772417ba069c7", "parents": [ "e9a7cad6d9025bf91cbb147ecf652e8fc023c3a9" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Mon Aug 31 19:39:43 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 31 19:44:01 2026" }, "message": "fuzzilli: Update integer `*Element` types to use bounded int types\n\nA recent Fuzzilli CL [1] introduced support for bounded integer types.\nCurrently, the integer `*Element` types were all the type merger of the\nprimitive `ILType.integer` and an `ObjectGroup`. Consequently, Fuzzilli\nwas always generating values within the range of a 64-bit integer.\nFollowing this change, Fuzzilli will now understand the appropriate\nbounds of these `*Element` types.\n\nSince the bounded integer types are implemented using `namedIntegers`,\nthey have `group`s. In order to merge these types with our custom\n`ObjectGroup`, the names need to match. As a result, the `Element`\nsuffix was dropped from all the group names, excepting `StringElement`.\nThere already is a `String` `ObjectGroup`, so we cannot redefine it.\n\n[1]: https://crrev.com/i/9734538\n\nBug: 553587894\nChange-Id: I2ac0ef8898beb81cb9dacdf9d476fe328d9fa889\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8308236\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1689164}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 096dabb62b0cd01c7fb14e5dfb5d82091c07700e\n" }, { "commit": "e9a7cad6d9025bf91cbb147ecf652e8fc023c3a9", "tree": "4d5c174ac7790b30eafe9a5bb762c65d9e4557ef", "parents": [ "1560ed0042cd535704ba911357a11d57ddf0b125" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Fri Aug 28 22:25:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 28 22:31:30 2026" }, "message": "fuzzilli: Add support for Mojo data pipe handles to generated profiles\n\nAdd support for Mojo data pipe handles (`DPPIPE`, `DCPIPE`) and their\noperations in Fuzzilli Mojom fuzzing:\n\n- mojom_fuzzilli_generator.py: Add HANDLES_MAPPING and update\n _FormatUniqueName / _ILTypeName to map handle kinds to FuzzIL types.\n- MojoCommonProfile.swift: Add `ObjectGroup`, `ILType`, and constructors\n\nBug: 553473421\nChange-Id: I4805a4e9acf5f0b8f84e76f4a4ee1bb7cf7c7761\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8287546\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1688391}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a394b8b8b49e02e7cc724dd3fab9fb36986e979a\n" }, { "commit": "1560ed0042cd535704ba911357a11d57ddf0b125", "tree": "5b9d699b804a395906bf58de712792712999a999", "parents": [ "e5bcfab3b158371d37de53ab5c1e57836819d42c" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Thu Aug 27 00:41:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 27 00:46:40 2026" }, "message": "fuzzilli: Update `MojoCommonProfile.swift` for generated profiles\n\nThis CL updates `MojoCommonProfile.swift` to follow the conventions set\nby the generated profiles and to provide the types that these profiles\nexpect.\n\nIn particular,\n`mojo/public/tools/bindings/generators/mojom_fuzzilli_generator.py` has\na list of types in `IGNORED_TYPES` that profiles expect to be globally\ndefined. Those are added in this CL. Moreover, this CL adds the\nprimitive element types (e.g. `FloatElement`) used by iterables.\nFinally, this CL updates the names of existing types to match the\nnaming convention set by the generator.\n\nBug: 479225939\nChange-Id: I35f86dbaddfbf209e9fd90ddd9c9cb75fab99881\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8281585\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686805}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9e4dfd92c21e6eb984187c3ce448264a73ce9cbb\n" }, { "commit": "e5bcfab3b158371d37de53ab5c1e57836819d42c", "tree": "41075b193fe7648e0aed84a83d6deabdb4cd21d8", "parents": [ "fae89b214864df6c1220771be2e8db03e9daa350" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Wed Aug 26 20:14:12 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 20:23:22 2026" }, "message": "fuzzing: Add Fuzzilli profile for fuzzing SpeculationHost web interface\n\nIntroduce a Fuzzilli profile for fuzzing the SpeculationHost interface\ndefined in `speculation_host.mojom` [1].\n\n[1]: https://crsrc.org/c/third_party/blink/public/mojom/speculation_rules/speculation_rules.mojom;drc\u003d303c8119751d10524a24ff84c26ef78559f77881\n\nBug: 553004102\nChange-Id: Ia54e23bc35eac300c8d05a88548993712a682778\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8297541\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686609}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 70789fc8126acd03b49bf2352a59da2ed877af62\n" }, { "commit": "fae89b214864df6c1220771be2e8db03e9daa350", "tree": "26c4b273d16e3dbb7dcf76010a2116f476043559", "parents": [ "00286df84add509c66ce2a75e00e391aff75e3e6" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Wed Aug 26 16:35:58 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 26 16:43:44 2026" }, "message": "fuzzilli: Add no-op object literal generator for union fuzzing\n\nWhen fuzzing Mojo interfaces with union types, Fuzzilli generates object\nliterals. Fuzzilli mutators require a valid code generator for the\n`.objectLiteral` context, but modifying these object literals would\ninvalidate the union structure.\n\nRegister MojoObjectLiteralNoopGenerator in commonMojoCodeGenerators to\nprovide a no-op generator for the `.objectLiteral` context.\n\nBug: 532202198\nChange-Id: I4f1af1c19d47555e9d5f94809a3d10bc5339c0e1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8279074\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1686487}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 12687c8c946d33ca7d41882a5869f98dd051aed5\n" }, { "commit": "00286df84add509c66ce2a75e00e391aff75e3e6", "tree": "4574ff1b16a535b26900fddf7031dd372e99b867", "parents": [ "53dd7619efcad77f59996b04adf6f4650e8e7a74" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Tue Aug 25 21:41:39 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 21:46:32 2026" }, "message": "fuzztest: Refactor fuzzing tests and add tests for fuzztests\n\nA few changes in this CL in order to create a suite of fuzzer smoke\ntests:\n\n - Moves fuzzers used by tests to testing/libfuzzer/tests/\n - Introduces (or rewrites) stub and crashing fuzzers for each of the fuzzer variations we care about.\n - Adds parameterized tests for all the fuzzer variations we care about.\n\nNote that we no longer use the string_compare fuzzers in tests. They\nessentially functioned as instrumentation smoke tests since they would\nonly crash if the strcmp instrumentation was working. A follow up CL,\nsimilar to this one, will reorganize those fuzzers to test all the\nfuzzer variations we care about.\n\nBug: 542680208\nChange-Id: Iad24803b0aedd07eedb65b0c86170e1ada7f6ee6\nBypass-Check-License: fuzztest_cq_smoke_test.cc and llvm_stub_fuzzer.cc were previously fuzztest_smoketest.cc and empty_fuzzer.cc\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8231162\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685981}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8b88f283e4a86e6c20ac46aa5c14c6798f254ee9\n" }, { "commit": "53dd7619efcad77f59996b04adf6f4650e8e7a74", "tree": "af81b2c38eb7f36b8f3e32a4228cb4e26fdc5a32", "parents": [ "dfc1a732462cadc0abe2be4977b0a08dcfac73ea" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Tue Aug 25 13:28:33 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Aug 25 13:32:58 2026" }, "message": "fuzzing: Replace Mojo Fuzzilli profiles with generated counterparts\n\nThis CL replaces the LockManager and CredentialManager profiles, which\nhad been handwritten, with profiles generated by\n`mojom_fuzzilli_generator.py` [1].\n\n[1]:\nhttps://crsrc.org/c/mojo/public/tools/bindings/generators/mojom_fuzzilli_generator.py\n\nBug: 479225937\nChange-Id: I9f83a1b3d727f96b25616dd3cc4874a4d27c5874\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8065566\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685488}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: eb97b9b354cda441bc22fc70b0fffd78be8f2880\n" }, { "commit": "dfc1a732462cadc0abe2be4977b0a08dcfac73ea", "tree": "8dda1bd40e4ece67a3658f5ee2e10cd5b1d01748", "parents": [ "aa752d2e573f1add0028138bae592607fd190eb8" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@chromium.org", "time": "Mon Aug 24 23:46:02 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 24 23:53:32 2026" }, "message": "fuzzing: Fix fuzzilli_driver.cc compile error from V8 internal header\n\n`fuzzilli_driver.cc` included `v8/src/fuzzilli/cov.h` solely to call\n`fuzzilli_cov_enable()`. `cov.h` is an internal V8 header that itself\nincludes `src/diagnostics/basic-block-profiler.h`. The compiler searched\nfor this file relative to Chromium, failing to find it and causing\ncompilation failures.\n\nReplace the `#include` with a forward declaration of\n`fuzzilli_cov_enable()` to cleanly link against `//v8:fuzzilli_cov`\nwithout needing to importing V8 internal headers.\n\nFixed: 552037723\nChange-Id: I181eef8ec69c8f7a8e5aaae2d0b67ccf6bb73dc0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8280062\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1685066}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c2084a7767c95cce655ed75116c0bf711044fafe\n" }, { "commit": "aa752d2e573f1add0028138bae592607fd190eb8", "tree": "77c81a1361e4fec70a7dbf81c8931934e777861e", "parents": [ "3067c7790ec8346aa16a809589daa6b887f6741e" ], "author": { "name": "Devon Loehr", "email": "dloehr@google.com", "time": "Wed Aug 19 03:29:15 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Aug 19 03:32:49 2026" }, "message": "Prewarm dlls and symbol initialization for all fuzzer tests\n\nIn the windows SDK 28000+, dbghelp.dll requires msdia140.dll, which\nrequires code authentication. This calls CreateThread, which causes\nASAN to hang if it\u0027s run for the first time during a crash, while\nASAN already holds the lock.\n\nWe had a spot fix for this, but it needs to be applied more generally,\nso hoist it into its own file and ensure that file is linked into our\nfuzzing tests.\n\nThere\u0027s an additional problem that the spot-fixed test didn\u0027t have, which\nis that if we pass `symbolize\u003d1` then we\u0027ll try to invoke SymInitialize\nand run into the same problems. To get around that, call it once during\nsetup, then reset everything before the test actually starts.\n\nBug: 548509159\nChange-Id: I8b44a7f4b4fc644555cd515370b6b9c8ff6726d1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8269425\nCommit-Queue: Devon Loehr \u003cdloehr@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1681985}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dc48d7f7d740972f3c8a8bcb8cfb2274ee4e463a\n" }, { "commit": "3067c7790ec8346aa16a809589daa6b887f6741e", "tree": "43d1b2a2da10dad059e14a21230cd14c4af2b20c", "parents": [ "ef53da849fd9d3c21a2a9255da160d1bde6a0a7f" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@google.com", "time": "Sat Aug 15 02:13:25 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Sat Aug 15 02:16:41 2026" }, "message": "lpm: Re-enable lpm smoke test on macOS\n\nWhen the tryjob for https://crrev.com/c/7958022 ran, linking failed with\na SwiftShader error. This was because, at the time, a SwiftShader roll\nhad broken the mac asan build i.e. this roll:\nhttps://crrev.com/c/7954910. Eventually that roll was reverted\n(https://crrev.com/c/7959032) and the test no longer fails.\n\nThis CL re-enables the test.\n\nBug: 526667982\nChange-Id: I363ef395fa58c57b397d32749555370fdaa9f4e7\nCq-Include-Trybots: luci.chromium.try:mac-arm64-libfuzzer-asan-rel-tests\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257720\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1680100}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 26d09e71a4f0bed0af2d01f35739ef41ebd303a3\n" }, { "commit": "ef53da849fd9d3c21a2a9255da160d1bde6a0a7f", "tree": "632ceccf028b826c455c353b189c4b78e1ac5e43", "parents": [ "810eab99c0bcea58617e5d8f6a66b5dd866f66d8" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Fri Aug 14 21:07:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 14 21:10:57 2026" }, "message": "fuzzing: Disable certain Fuzzilli mutators in experimental profiles\n\nThis CL disables the ExplorationMutator, ProbingMutator, and\nPropertyAccessorMutator mutators. These mutators target JavaScript\nbehavior and generic objects (e.g. loading builtin properties,\ngetter/setter side effects), which is not relevant for fuzzing Mojo\nrenderer-exposed IPC interfaces. Disabling them eliminates the\ngeneration of arcane JavaScript and focuses fuzzing on valid Mojo API\ncalls.\n\nBug: 535158017\nChange-Id: If2379c8ab1ce493bc05cd6848310f45a2e548f72\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8258220\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1679895}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d5eb0b4e80705c27a00e2066ed7bb4e1f3a03545\n" }, { "commit": "810eab99c0bcea58617e5d8f6a66b5dd866f66d8", "tree": "642bed32af2036de2b2fbba2b6cefb6a08c20bd6", "parents": [ "56dfebb82dbdaad27a3d2fb2a8c40b6cecf98f6f" ], "author": { "name": "Alex Ovsienko", "email": "ovsienko@google.com", "time": "Fri Aug 14 06:17:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Aug 14 06:21:15 2026" }, "message": "Ruff: reformat testing.\n\nPreserve yapf style to the best capacity.\n\nLSC doc:\nhttps://docs.google.com/document/d/1P6AE9aeKuFkxPAYInYxLFIpDgpiCAT-S_BQkNU0lb3s/edit?tab\u003dt.0\n\nOnboarded using the following command: `~/cr/depot_tools/ruff_chromium format .`\n\nNO_IFTTT\u003dPure reformatting\n\nBug: 40874143\nChange-Id: Ie04d61510824718e88907b20adb0fb884250fe33\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8257278\nCommit-Queue: Alex Ovsienko \u003covsienko@google.com\u003e\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nSLSA-Policy-Verified: SLSA Policy Verification Service \u003cdevtools-gerritcodereview-exitgate@google.com\u003e\nOwners-Override: Alex Ovsienko \u003covsienko@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1679385}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 39a4a07218b68d38327e7842aa78453ad62b19c7\n" }, { "commit": "56dfebb82dbdaad27a3d2fb2a8c40b6cecf98f6f", "tree": "285aef77e495d4b0ff52905b7b800e5108774a4f", "parents": [ "af2100048538b9a412a7a58823865edd114bcc2a" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Mon Aug 10 16:00:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Aug 10 16:04:49 2026" }, "message": "fuzzing: Fix .jsPromise in Mojo Fuzzilli profiles\n\n`.jsPromise` is now a function call requiring the `resolvesTo` argument.\nThis CL updates `.jsPromise` usage for the `CredentialManager` and\n`LockManager` profiles.\n\nBug: 479225937\nChange-Id: Ib122f9a8fbd9db4b5c797b42558d88bcd19819b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8230718\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1676483}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9e08bf55fab0cd25945d4bb455f7bff1f85c72d8\n" }, { "commit": "af2100048538b9a412a7a58823865edd114bcc2a", "tree": "9168348d81af1645a1dfa218d0a40ea0761e5731", "parents": [ "a61979592f4b7cc753e350b9fec3e1aee598e77e" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Jul 30 09:56:51 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 30 10:00:36 2026" }, "message": "[unsafe-buffers] Remove allow_unsafe_buffers from some fuzzers\n\nRemove the file-wide \u0027#pragma allow_unsafe_buffers\u0027 from:\n- mach_message_converter.cc\n- prtime_fuzzer.cc\n- skia_path_common.cc/h\n- skia_path_fuzzer.cc\n- skia_pathop_fuzzer.cc\n- template_url_parser_fuzzer.cc\n\nAnd replace unsafe buffer usage with safe base::span or wrap it in\nUNSAFE_TODO where appropriate. Also rename data_span to bytes in some\nfuzzers.\n\nBug: 351564777, 501112808\nDoc: http://bit.ly/complete_unsafe_todo_migration\nChange-Id: Ic160781444f6388f5d1ac2583478ebc3231800a0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8158980\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1670943}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c139d816cbfbd38016c0ea9e7b6cb55395e62342\n" }, { "commit": "a61979592f4b7cc753e350b9fec3e1aee598e77e", "tree": "91dffd891bfd9b379701da0a490da97c3958679c", "parents": [ "8a383aa53346c4d3714841d7ab3ebeb6a79844d5" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Wed Jul 29 23:31:54 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 29 23:35:05 2026" }, "message": "[unsafe-buffers] Remove allow_unsafe_buffers from testing/libfuzzer\n\nRemove the file-wide \u0027#pragma allow_unsafe_buffers\u0027 from:\n- fuzzilli_driver.cc\n- unittest_main.cc\n\nIn fuzzilli_driver.cc, replace unsafe buffer usage with safe base::span.\nIn unittest_main.cc, use local clang diagnostic pragmas to suppress the\nwarning, as this file is shared with WebRTC standalone and cannot depend\non //base.\n\nBug: 351564777, 501112808\nDoc: http://bit.ly/complete_unsafe_todo_migration\nChange-Id: I56f848fdb7792cd4340b31bd765873cebffb940e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8163201\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1670678}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f6cbd7bf4e2ace5a319f2b26537346f464e348ff\n" }, { "commit": "8a383aa53346c4d3714841d7ab3ebeb6a79844d5", "tree": "889ef05b0e7cb06060c71bbc089cf861e5798ecb", "parents": [ "2362aabe28f87028013722d988a38c94089d7c55" ], "author": { "name": "Devon Loehr", "email": "dloehr@google.com", "time": "Wed Jul 29 18:05:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 29 18:09:08 2026" }, "message": "Start loading msdia140.dll when loading dbghelp.dll\n\nIn the newest windows SDK versions, dbghelp.dll now depends on\nmsdia140.dll, which is also present in more locations in the toolchain\npackage. However, dbghelp loads msdia dynamically at runtime, so we\nneed to ensure it\u0027s prewarmed before entering the sandbox.\n\nWe also need to make sure that we copy the dll to the out directory.\nSince GN expects steps to always have the same output, we copy some\nversion of the dll even for older SDK versions, where it will usually\nbe ignored.\n\nBug: 534305839\nChange-Id: Ic7d76e728a2942bdd28f0a3fbda88c5167e06214\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8125374\nReviewed-by: Avi Drissman \u003cavi@chromium.org\u003e\nReviewed-by: Alex Gough \u003cajgo@chromium.org\u003e\nCommit-Queue: Devon Loehr \u003cdloehr@google.com\u003e\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1670418}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5b107640bfc27738593a545105bb887844cce688\n" }, { "commit": "2362aabe28f87028013722d988a38c94089d7c55", "tree": "1d8f78444856f16bad739c6cf4ab04cc60f4a032", "parents": [ "77925bf1d4d8641ac0e7fb2cca50b7f265409702" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Wed Jul 22 17:49:42 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jul 22 17:53:29 2026" }, "message": "fuzztest: Propagate SIGTERM from wrapper to underlying fuzzer\n\nIn ClusterFuzz, FuzzTests are not executed directly. We build a wrapper\nthat calls into the main fuzzer binary. This wrapper doesn\u0027t have a\nhandler for SIGTERM, so when ClusterFuzz sends SIGTERM, it only kills\nthe wrapper, and the fuzzer keeps running, often deleting and adding new\nfiles.\n\nThis causes issues with the corpus merging step that happens right after\ni.e. it deletes files that libfuzzer expect to exist. This triggers a\nbug in libfuzzer that causes it to enter an infinite loop.\n\nBug: 529865766\nChange-Id: I29b5b9e4b64b6b7a7fc92126d85d0d34e6ceafc1\nInclude-Ci-Only-Tests: true\nCq-Include-Trybots: luci.chromium.try:linux-libfuzzer-asan-rel,linux-libfuzzer-high-end-asan-rel,chromeos-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel,win_chromium_compile_dbg_ng\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8131498\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1666467}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 6ff55e7acd1d93172ec0caae8f742569ebe714e4\n" }, { "commit": "77925bf1d4d8641ac0e7fb2cca50b7f265409702", "tree": "04dbcffa1b1fe6492bd065f970aa697eff81badb", "parents": [ "93473657bcde37efac792877468143fd014b978d" ], "author": { "name": "Arthur Sonzogni", "email": "arthursonzogni@chromium.org", "time": "Thu Jul 16 14:37:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 16 14:41:53 2026" }, "message": "[unsafe-buffers] Remove allow_unsafe_buffers from testing/\n\nTransition the last few files in testing/ away from:\n#pragma allow_unsafe_buffers\n\nBug: 351564777, 501112808\nDoc: go/complete_unsafe_todo_migration\nChange-Id: Ieb990c1e97da6028278d5b6f87bfad29eb1106df\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8045185\nCommit-Queue: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nAuto-Submit: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1663132}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4d9779222bb01c3bedf0ada2d4dbcb3bec907f0a\n" }, { "commit": "93473657bcde37efac792877468143fd014b978d", "tree": "b9e8a4cd8a872a29b29dc5c4d96497b135c78446", "parents": [ "421cf822e8f925d63238bb30226dfab64ea45c83" ], "author": { "name": "Victor Liu", "email": "liuvic@google.com", "time": "Thu Jul 09 15:52:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jul 09 15:54:57 2026" }, "message": "Add error logging to FuzzTest wrappers\n\nWith schema v1 archives, we encounter failures during `execvp` but lack\nclarity on the root cause and only receive return code 1.\n\nAdding pre- and post- flight checks around `execvp` process launching\nfor common errors to provide better descriptions of the errors\nencountered.\n\nBug: 531741750\nChange-Id: I1785d058a49c7d5906831c252508bea9b7c3b3b8\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8045087\nCommit-Queue: Victor Liu \u003cliuvic@google.com\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1659593}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5d21b9a34030beb45b1cb9dc70902e37da9a1029\n" }, { "commit": "421cf822e8f925d63238bb30226dfab64ea45c83", "tree": "b0c19bbd99f48c8e40895526b96cc8fa9a94e439", "parents": [ "ab633b580bf97c1ef1b329869865326702a04c6c" ], "author": { "name": "Paula Gomez", "email": "paugomez@google.com", "time": "Tue Jun 30 18:23:53 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 30 18:30:57 2026" }, "message": "Disable FuzzerStacktraceTest.SymbolizesCheck on ASan Debug builds\n\nFuzzerStacktraceTest.SymbolizesCheck consistently fails on\nlinux-x64-libfuzzer-asan-dbg-tests because ASan Debug builds catch\nSIGABRT directly and output AddressSanitizer:DEADLYSIGNAL instead of\nlibFuzzer printing its signal header. This CL disables the test on ASan\nDebug builds to unblock the builder while the regex is updated.\n\nBug: 529790472\nChange-Id: I3dfa84b1bb0ac286fbf333f4e087edca4da5e32a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8025917\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Paula Gómez \u003cpaugomez@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1654904}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c4ae41e16d199df7a23cd85fcc444214509a87cc\n" }, { "commit": "ab633b580bf97c1ef1b329869865326702a04c6c", "tree": "7e9cf121099e3e6be43aa5b00e70b8a5bd71372c", "parents": [ "fbd6f48e36bc16a8f5dfd3a5b6854c64b40e7c04" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Mon Jun 29 15:10:18 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 29 15:12:11 2026" }, "message": "fuzzing: Add bug link for missing gn config and call out debugging flags\n\nSometimes some jobs are misconfigured and missing gn args.\n\nBug: 525333065\nChange-Id: Ic37db4dfda61d76426241712218b4b72bcc45056\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/8010312\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1654078}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f650a5ad02629b47efe76cf84582bc6a19be9c00\n" }, { "commit": "fbd6f48e36bc16a8f5dfd3a5b6854c64b40e7c04", "tree": "7acc6e14191330c2589e373b6377f78cb945c577", "parents": [ "e8c8cccb8953f5b89157b8093c7a48906a663238" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Wed Jun 24 20:55:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 24 20:57:26 2026" }, "message": "Reland \"lpm: Fix duplicate proto symbols when using any.proto\"\n\nThis is a reland of commit 190ebfac9fb254c48d09eee1236c09341a26905e\n\nThe original CL caused //content/BUILD.gn to be evaluated which\nasserts that `use_blink` is true. Patchset 2 avoids compiling the\nfuzzer and running the test when `use_blink` is false.\n\nVerified locally on mac that Patchset 1 causes gn gen to fail\nand Patchset 2 succeeds. Also added ios-catalyst to Cq-Include-Trybots.\n\nOriginal change\u0027s description:\n\u003e lpm: Fix duplicate proto symbols when using any.proto\n\u003e\n\u003e QUICHE started to use any.proto. LPM also uses any.proto but it uses the\n\u003e full version. Because we can\u0027t have both version at the same time,\n\u003e QUICHE tried to use the full version when fuzzing.\n\u003e\n\u003e Unfortunately this didn\u0027t work either and broke all LPM fuzzers. This is\n\u003e because the any_full_proto target compiled as a static_library so it was\n\u003e linked into all libraries that used it. Since full protos are registered\n\u003e globally, this caused QUICHE and LPM to register the same proto twice\n\u003e which caused a crash.\n\u003e\n\u003e To fix the issue, we change any_full_proto to be a\n\u003e fuzzable_proto_library essentially compiling as a shared library. This\n\u003e way the protos are only registered once. We also revert\n\u003e https://crrev.com/c/7957615 which fixed LPM fuzzers but broke coverage\n\u003e bots.\n\u003e\n\u003e Also adds a smoke test that runs an LPM fuzzer and verifies it doesn\u0027t\n\u003e crash on startup. This ensures changes that break LPM fuzzers are caught\n\u003e by the CQ.\n\u003e\n\u003e LPM fuzzers are broken in a few bots that we don\u0027t fuzz in, so this\n\u003e fixes some cases (printing) and disables the fuzzer/test in others.\n\u003e\n\u003e Bug: 524216727, 526664486\n\u003e Change-Id: I62faae99e1146e398d15c785f3c11ac46c9169cb\n\u003e Cq-Include-Trybots: luci.chromium.try:linux-libfuzzer-asan-rel,linux-libfuzzer-high-end-asan-rel,chromeos-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel,win_chromium_compile_dbg_ng\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7958022\n\u003e Reviewed-by: Tigran Bantikyan \u003cbantikyan@google.com\u003e\n\u003e Commit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\n\u003e Reviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\n\u003e Reviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\n\u003e Reviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Reviewed-by: Kamil Jarosz \u003ckjarosz@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1651791}\n\nBug: 524216727, 526664486\nCq-Include-Trybots: luci.chromium.try:linux-libfuzzer-asan-rel,linux-libfuzzer-high-end-asan-rel,chromeos-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel,win_chromium_compile_dbg_ng,ios-catalyst\nChange-Id: I148a0ae139afb542463201e4bd9091a9fca88880\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7988920\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nReviewed-by: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Kamil Jarosz \u003ckjarosz@google.com\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1651966}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: dbe533930432c4dda9b1b5ef1b1cc1f856c9c6f5\n" }, { "commit": "e8c8cccb8953f5b89157b8093c7a48906a663238", "tree": "44b5b608340ebfda62397cfea5979081e72fed04", "parents": [ "f5aa3c33b989c20aa42225a7139b78b594d810b2" ], "author": { "name": "luci-bisection@appspot.gserviceaccount.com", "email": "luci-bisection@appspot.gserviceaccount.com", "time": "Wed Jun 24 17:49:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 24 17:52:13 2026" }, "message": "Revert \"lpm: Fix duplicate proto symbols when using any.proto\"\n\nThis reverts commit 190ebfac9fb254c48d09eee1236c09341a26905e.\n\nReason for revert:\nLUCI Bisection has identified this change as the culprit of a build failure. See the analysis: https://ci.chromium.org/ui/p/chromium/bisection/compile-analysis/b/8678095202558153697\n\nSample failed build: https://ci.chromium.org/b/8678095202558153697\n\nIf this is a false positive, please report it at http://b.corp.google.com/createIssue?component\u003d1199205\u0026description\u003dAnalysis%3A+https%3A%2F%2Fchromium-review.googlesource.com%2Fc%2Fchromium%2Fsrc%2F%2B%2F7958022\u0026format\u003dPLAIN\u0026priority\u003dP3\u0026title\u003dWrongly+blamed+https%3A%2F%2Fci.chromium.org%2Fui%2Fp%2Fchromium%2Fbisection%2Fcompile-analysis%2Fb%2F8678095202558153697\u0026type\u003dBUG\n\nOriginal change\u0027s description:\n\u003e lpm: Fix duplicate proto symbols when using any.proto\n\u003e\n\u003e QUICHE started to use any.proto. LPM also uses any.proto but it uses the\n\u003e full version. Because we can\u0027t have both version at the same time,\n\u003e QUICHE tried to use the full version when fuzzing.\n\u003e\n\u003e Unfortunately this didn\u0027t work either and broke all LPM fuzzers. This is\n\u003e because the any_full_proto target compiled as a static_library so it was\n\u003e linked into all libraries that used it. Since full protos are registered\n\u003e globally, this caused QUICHE and LPM to register the same proto twice\n\u003e which caused a crash.\n\u003e\n\u003e To fix the issue, we change any_full_proto to be a\n\u003e fuzzable_proto_library essentially compiling as a shared library. This\n\u003e way the protos are only registered once. We also revert\n\u003e https://crrev.com/c/7957615 which fixed LPM fuzzers but broke coverage\n\u003e bots.\n\u003e\n\u003e Also adds a smoke test that runs an LPM fuzzer and verifies it doesn\u0027t\n\u003e crash on startup. This ensures changes that break LPM fuzzers are caught\n\u003e by the CQ.\n\u003e\n\u003e LPM fuzzers are broken in a few bots that we don\u0027t fuzz in, so this\n\u003e fixes some cases (printing) and disables the fuzzer/test in others.\n\u003e\n\u003e Bug: 524216727, 526664486\n\u003e Change-Id: I62faae99e1146e398d15c785f3c11ac46c9169cb\n\u003e Cq-Include-Trybots: luci.chromium.try:linux-libfuzzer-asan-rel,linux-libfuzzer-high-end-asan-rel,chromeos-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel,win_chromium_compile_dbg_ng\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7958022\n\u003e Reviewed-by: Tigran Bantikyan \u003cbantikyan@google.com\u003e\n\u003e Commit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\n\u003e Reviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\n\u003e Reviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\n\u003e Reviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\n\u003e Reviewed-by: Kamil Jarosz \u003ckjarosz@google.com\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1651791}\n\u003e\n\nBug: 524216727, 526664486\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I9478b5dc6b52a15c623205eccf30174ba8f73d1a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7990617\nBot-Commit: luci-bisection@appspot.gserviceaccount.com \u003cluci-bisection@appspot.gserviceaccount.com\u003e\nCommit-Queue: luci-bisection@appspot.gserviceaccount.com \u003cluci-bisection@appspot.gserviceaccount.com\u003e\nOwners-Override: luci-bisection@appspot.gserviceaccount.com \u003cluci-bisection@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1651833}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4f1cd359dc4965d6113ee3c403bd51a385b10b59\n" }, { "commit": "f5aa3c33b989c20aa42225a7139b78b594d810b2", "tree": "642d222a27e86885b80af428fc8bd30629cbaff4", "parents": [ "212c3f40b4653db8bfd1479ea6448c29e13b2cf3" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Wed Jun 24 17:00:16 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 24 17:02:35 2026" }, "message": "lpm: Fix duplicate proto symbols when using any.proto\n\nQUICHE started to use any.proto. LPM also uses any.proto but it uses the\nfull version. Because we can\u0027t have both version at the same time,\nQUICHE tried to use the full version when fuzzing.\n\nUnfortunately this didn\u0027t work either and broke all LPM fuzzers. This is\nbecause the any_full_proto target compiled as a static_library so it was\nlinked into all libraries that used it. Since full protos are registered\nglobally, this caused QUICHE and LPM to register the same proto twice\nwhich caused a crash.\n\nTo fix the issue, we change any_full_proto to be a\nfuzzable_proto_library essentially compiling as a shared library. This\nway the protos are only registered once. We also revert\nhttps://crrev.com/c/7957615 which fixed LPM fuzzers but broke coverage\nbots.\n\nAlso adds a smoke test that runs an LPM fuzzer and verifies it doesn\u0027t\ncrash on startup. This ensures changes that break LPM fuzzers are caught\nby the CQ.\n\nLPM fuzzers are broken in a few bots that we don\u0027t fuzz in, so this\nfixes some cases (printing) and disables the fuzzer/test in others.\n\nBug: 524216727, 526664486\nChange-Id: I62faae99e1146e398d15c785f3c11ac46c9169cb\nCq-Include-Trybots: luci.chromium.try:linux-libfuzzer-asan-rel,linux-libfuzzer-high-end-asan-rel,chromeos-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel,win_chromium_compile_dbg_ng\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7958022\nReviewed-by: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: David Schinazi \u003cdschinazi@chromium.org\u003e\nReviewed-by: Andrew Grieve \u003cagrieve@chromium.org\u003e\nReviewed-by: Kamil Jarosz \u003ckjarosz@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1651791}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 190ebfac9fb254c48d09eee1236c09341a26905e\n" }, { "commit": "212c3f40b4653db8bfd1479ea6448c29e13b2cf3", "tree": "44b5b608340ebfda62397cfea5979081e72fed04", "parents": [ "8b9aeda747ac15522b7c6139999498b5c3c762db" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Thu Jun 18 21:15:11 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 18 21:18:10 2026" }, "message": "fuzzing: Use optional parameters in MojoCredentialManagerProfile.swift\n\nThe three `String16` fields in the `blink.mojom.CredentialInfo` struct\nare optional. This CL updates the struct constructor to use `either`\nparameters for those fields, each accepting either a `String16` or\n`undefined`, to facilitate Fuzzilli fuzzing the optional logic.\n\nBug: 515122865\nChange-Id: Iad4c39ce63205fdde00c33da7df4aa936cf11ced\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7961984\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1649306}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9fa2e86577ee7b75481fb917ce9b30efc22acd85\n" }, { "commit": "8b9aeda747ac15522b7c6139999498b5c3c762db", "tree": "8e0c5070c0171aa2b74516cc0f605b4f0bf6d06c", "parents": [ "6890b4e30e869748a923815ffc71eb6d1ca18ffc" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Wed Jun 17 16:53:44 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jun 17 16:55:24 2026" }, "message": "fuzzing: Prevent errors from multiple Mojo bind requests from Fuzzilli\n\nSome Mojo interfaces (like `CredentialManager`) expect a single bind\nrequest. If `getRemote` is called when the receiver is already bound,\nthe call fails [1]. Remotes returned by these calls will always throw\nerrors since the other end is not bound.\n\nThis causes issues for Fuzzilli, in particular:\n- Fuzzilli runs all its test cases on the same page. Without cleanup, receivers remain bound across different fuzzing runs.\n\n- Program generation: Even though `MojoMethodCallGenerator` currently tries to avoid duplicate `getRemote` calls, Fuzzilli\u0027s mutators often splice or copy code in a way that introduces numerous calls. Calls on these remotes will always fail.\n\nThis CL addresses both issues by:\n\n1. Closing the remote at the end of the test case.\n2. Injecting a getOrCreatePrimaryRemote method that ensures the remote\nis only bound once.\n\nWe do this by using `codePrefix` and `codeSuffix` which are not visible\nto fuzzilli when mutating programs [2].\n\n`ProgramTemplate` is removed in favor of `MojoMethodCallGenerator` using\nan existing remote or using getOrCreatePrimaryRemote() if needed. We\nintentionally avoid using the interface static variable to prevent\ndirect getRemote() calls.\n\n- [1]:\nhttps://crsrc.org/c/components/credential_management/content_credential_manager.cc;l\u003d74-77;drc\u003db533f05b036bcc875144a0e228b768d58acbc169\n- [2]:\nhttps://github.com/googleprojectzero/fuzzilli/blob/e1776516c3ceb3b17ec63df6395ffe0c8dd5efc5/Sources/Fuzzilli/Lifting/JavaScriptLifter.swift#L183\n\nBug: 479225937\nChange-Id: I2ecb5d3dd3817d7748699816bc8b452cde4d4c46\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7922521\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1648391}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9cfdc3e6732a0ffd19119f9a488a1b415686e7f2\n" }, { "commit": "6890b4e30e869748a923815ffc71eb6d1ca18ffc", "tree": "7618863e7853d783648ffa9620bc46bf18704bf8", "parents": [ "953e5b797c49316a6eb74df8bf49376de5bf49c2" ], "author": { "name": "Alex Kallam", "email": "aakallam@chromium.org", "time": "Fri Jun 12 21:58:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jun 12 21:59:57 2026" }, "message": "[Fuzzing] Disable fuzztest wrapper fuzzer on libfuzzer\n\nBug: 522779559\nChange-Id: Ibca558549874975626f368ee8e195785bb22a064\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7933437\nCommit-Queue: Alex Kallam \u003caakallam@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Alex Kallam \u003caakallam@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1646257}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 645bec325493fa6891354137e286a2ad5ab47d14\n" }, { "commit": "953e5b797c49316a6eb74df8bf49376de5bf49c2", "tree": "55cc6fd796abe80e294a09c1f0cbfe71b1122ade", "parents": [ "a832a7ba086b720c4b472c9c81dffb0b6f4f163d" ], "author": { "name": "Takuto Ikuta", "email": "tikuta@chromium.org", "time": "Fri Jun 12 16:06:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Jun 12 16:08:35 2026" }, "message": "Fix missing inputs for domatolpm fuzzing scripts in Siso\n\nSiso requires all build inputs to be explicitly tracked to enable full\nremote execution via RBE and prevent local fallbacks. This patch\nresolves several missing input issues for domatolpm-based fuzzers,\nallowing their generation scripts to be removed from the Siso denylist\nand executed remotely.\n\nBug: 513105742\nChange-Id: I547bf12b48b21d92bf9a2dd59721359e48deb598\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7915967\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nAuto-Submit: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1646010}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 1049f602d47c51ce832b73f82d91e08f10530b5c\n" }, { "commit": "a832a7ba086b720c4b472c9c81dffb0b6f4f163d", "tree": "f70829dad9a4d6a38e022e04c3a0b478c33e75c4", "parents": [ "56088222e35ebcca204ab7e80a62348072d03678" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Thu Jun 11 18:04:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 11 18:07:53 2026" }, "message": "fuzzing: Increase consistency among the Mojo Fuzzilli profiles\n\nThis CL updates MojoLockManagerProfile.swift to make it more consistent\nwith the style and design of MojoCredentialManagerProfile.swift. In\nparticular, the `ObjectGroup` definitions are made extensions of\n`ObjectGroup`, and the profile is updated to include all the\n`commonMojo*` definitions from MojoCommonProfile.swift. Also,\n`MojoMethodCallGenerator` is brought to parity, now specifically\ntargeting relevant methods.\n\nBug: 479225937\nChange-Id: Iebdc47d1d2fd711ea1cb6bd2c4a9854d8320bccf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7921986\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1645479}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bcd8de749e4a871bce297f0e1d2088365a4adfb6\n" }, { "commit": "56088222e35ebcca204ab7e80a62348072d03678", "tree": "0e478769959559c31f32eee3417c040176181eb1", "parents": [ "0eca37f63a5025bc5d1ad9354a380b4c728ec399" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Thu Jun 11 15:56:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 11 15:59:06 2026" }, "message": "fuzzing: Factor out MojoCommonProfile.swift definitions\n\nThis CL creates variables in MojoCommonProfile.swift grouping all the\npublic Fuzzilli definitions defined in the file (e.g. `ObjectGroup`s,\n`CodeGenerator`s, ...). Then, rather than having profiles include\nexactly what they need, they can default to using these groupings.\n\nWhen auto-generating profiles, it is difficult to determine exactly what\nneeds to be included from MojoCommonProfile.swift. Aside from the\n`ILType` that is directly used in the profile being generated, there may\nbe related `CodeGenerator`s, builtins, or `ObjectGroup`s that must be\nincluded from MojoCommonProfile.swift as well. The simplest approach is\nthus to include everything from MojoCommonProfile.swift.\n\nHaving all these definitions present in every profile should have a\nnegligible affect on fuzzing. The `CodeGenerator`s that generate code\nfuzzing the target interface have weights of 10,000, while all other\n`CodeGenerator`s have weights of one. Thus, the `CodeGenerator`s that\ninteract with objects that are potentially irrelevant to the target\ninterface will rarely be invoked (with likely less than 0.01% chance).\nOverwhelmingly, the programs generated will still focus on the target\ninterface.\n\nBug: 522354287\nChange-Id: I0d5ac2a1db651c0a416acc994222d53a2e1bd99b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7921169\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1645406}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9251830196b2cd375976e95abaae187f3a435705\n" }, { "commit": "0eca37f63a5025bc5d1ad9354a380b4c728ec399", "tree": "fa1d6f8c9492975c6f218839144a7fecd500334e", "parents": [ "00dd6c89e8383932e4ba9d5b3ea31ec11cefc072" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Thu Jun 04 15:54:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jun 04 15:57:07 2026" }, "message": "[experimental] Move js_in_process_fuzzer crash to run in all builds\n\nThis CL updates the experimental Fuzzilli crash, triggered by a specific\nstring in the inputted program, to run in all builds. Additionally, this\nCL increases the probability of Fuzzilli outputting this crash string to\nreduce downtime in investigating bug reporting.\n\nBug: 517206974\nChange-Id: I302d72151dad0e7ffbd6a69a1cc35fc985278f25\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7896032\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1641680}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 845d93badf9eafb550687093514972cc1128a8f6\n" }, { "commit": "00dd6c89e8383932e4ba9d5b3ea31ec11cefc072", "tree": "af2521ba2670d1162a1b8730d986c1562c5d2e13", "parents": [ "35e6df0014ef44ab0b00b7d3b72ec0bd93353fc6" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Tue Jun 02 18:40:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 02 18:42:04 2026" }, "message": "[Fuzzing] Remove icu_assets from fuzzer_test template\n\nRemove //third_party/icu:icu_asset from dependencies for Android, it was\nfound that this asset can be uploaded separately so it is not needed\ninside the APK\n\nR\u003dtitouan@chromium.org\n\nBug: 510921438\nChange-Id: Ic669fd51aaeccc5393d9d750ddad4bd111863d66\nValidate-Test-Flakiness: skip\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7891448\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Edgar Aguilar \u003celedgar@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1640344}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cb31ea241fe038f6cb901fa3ad081cca224e020a\n" }, { "commit": "35e6df0014ef44ab0b00b7d3b72ec0bd93353fc6", "tree": "0db675044dc68409b9d148524cafd62bd9e39b1d", "parents": [ "2ae6e6716c7a454345b0e45bce707a85763d2bc3" ], "author": { "name": "Kalvin Lee", "email": "kdlee@chromium.org", "time": "Tue Jun 02 14:27:49 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 02 14:29:52 2026" }, "message": "Busybody: Format GN files\n\nThis CL introduces no behavioral change. It was generated by issuing\n\n```\ngit ls-files -- \u0027*.gni\u0027 \u0027*.gn\u0027 \\\n | rg -v \u0027third_party/crashpad\u0027 \\\n | xargs gn format\n```\n\njust to prevent unlucky folks from having to deal with a presubmit\nerror about formatting, forcing them to introduce an unrelated diff to\ntheir CL.\n\nThis one is scoped to:\ntesting/libfuzzer/research\n\nThis CL was uploaded by git cl split.\n\nR\u003dtiszka@chromium.org\n\nBug: 515185457\nChange-Id: I8590204d4b54d19b5dff075279bdddfe076b2824\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7889196\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Kalvin Lee \u003ckdlee@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1640148}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 688b510702b7b7d035a9dfa7403f12adf01b0ad8\n" }, { "commit": "2ae6e6716c7a454345b0e45bce707a85763d2bc3", "tree": "f0c43eac0bd876680722d474f5f060ba15de990f", "parents": [ "3167affc7b591f3e9c2add561b869233f9389666" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Tue Jun 02 08:40:23 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jun 02 08:42:36 2026" }, "message": "[Fuzzing] Fix V8 snapshot and ICU initialization on Android\n\nFuzzers failed to load V8 snapshot and ICU data on Android because they\nattempted to locate these assets relative to the executable path, which\nis not valid on Android.\n\nFix this by using base::DIR_ASSETS to locate the assets directory on\nAndroid and passing the explicit file path to V8 initialization.\n\nBug: 510921438\n\nR\u003dtitouan@chromium.org\n\nTest: Built and executed successfully on an Android emulator.\nChange-Id: I0a331fafd018cec5ab96ad5224b3cc97461a7640\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7872048\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1640006}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a3e0b8803a4cd0952e626503635b2d9c62d8bf4d\n" }, { "commit": "3167affc7b591f3e9c2add561b869233f9389666", "tree": "7ca69e442ec5178030aff9956630e1655b0f5760", "parents": [ "36fbe57f2601585ea6c69190e36cd5ff85f33639" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Mon Jun 01 15:26:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Jun 01 15:27:53 2026" }, "message": "libfuzzer: Remove inactive reviewer\n\ntiszka has moved on from Chromium.\n\nChange-Id: I38df711eabe8d26bf88987f190d777db6ed60f9c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7886962\nReviewed-by: Antonio Alphonse \u003calphonsea@google.com\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1639408}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 38273c43da205975ae37dcfc9b3b259c765a9dfb\n" }, { "commit": "36fbe57f2601585ea6c69190e36cd5ff85f33639", "tree": "b9c03f9f636889e0869e2a9a0286b2a2a2c4dfaf", "parents": [ "7d6f66ef1f2ccd02beddc42dc633264c4fad1ba8" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Thu May 28 20:32:50 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 28 20:34:22 2026" }, "message": "[Fuzzing] Fix CommandLine init in template_url fuzzer\n\nAvoid crashing due to double initialization of CommandLine on Android, where it might already be initialized by the test runner.\n\nCheck if CommandLine is already initialized before calling Init.\n\nBug: 516909782\n\nR\u003dtitouan@chromium.org\n\nTest: Built and executed successfully on an Android emulator.\nChange-Id: I9ba6b71d620c9c79a970d28d5810e1411017d5ee\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7875356\nCommit-Queue: Edgar Aguilar \u003celedgar@google.com\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1637918}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b08b3811861ff44cdfe82084f458b3ee92a91e88\n" }, { "commit": "7d6f66ef1f2ccd02beddc42dc633264c4fad1ba8", "tree": "34bc1fd470ea127de49b75f06c99cf7de6da4a35", "parents": [ "42ad7d0c2e102980ee5b4140d2bb87c36ab775a3" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Thu May 28 19:38:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 28 19:41:21 2026" }, "message": "[experimental] Add crash to Fuzzilli fuzzing to investigate ClusterFuzz\n\nThis CL introduces a crash for every JavaScript program that outputs a\n\"EXPERIMENTAL_lock_manager_crash\" and updates the\nMojoLockManagerProfile.swift profile to emit that string. This change is\nexperimental in nature, as we seek to understand how ClusterFuzz will\nhandle `js_in_process_fuzzer` fuzz target crashes.\n\nBug: 517206974\nChange-Id: Ie1212b1bd5a559dc3e5361818ec0eb86d53cf515\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7878172\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1637881}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 90cf40bfcb573c9fd2e268476238709cfe69ffd4\n" }, { "commit": "42ad7d0c2e102980ee5b4140d2bb87c36ab775a3", "tree": "91752374d9b4d1c16f685bb2320d0aac8485d525", "parents": [ "9f43e5b7da4da73011cfd42149bbbb58d17cb9cc" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Wed May 27 18:04:52 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 27 18:06:53 2026" }, "message": "Add additionalOptionsBags definition in MojoLockManagerProfile.swift\n\nThe Profile struct was recently expanded with an `additionalOptionsBags`\nfield that all profiles must define.\n\nBug: 512875834\nChange-Id: I9c4368e7598a53855f68b6d11bd19d7b767a7f65\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7877845\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1637094}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 35106836ed423970c04c793488f6491967a45694\n" }, { "commit": "9f43e5b7da4da73011cfd42149bbbb58d17cb9cc", "tree": "97a709f2107adc8f373f13b81535c623b40a96f7", "parents": [ "003b352d87c1d3d52785d6d04318f490f22059ef" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Tue May 26 17:47:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 26 17:50:30 2026" }, "message": "Reland \"[Fuzzing] Fix ICU initialization.\"\n\nThis is a reland of commit 25597d6f2fecdd8d0c10d5fb692da301c1cfe7c7\n\nWith the addition of the right dependency defined in BUILD.gn so the\ncrash from the original doesn\u0027t occur. Removed the condition to only\ndepend on libfuzzer_support in Mac. Since fuzzers declare the include\nunconditionally.\n\nCq-Include-Trybots:\nluci.chromium.try:chromeos-libfuzzer-asan-rel,linux-libfuzzer-asan-rel,mac-libfuzzer-asan-rel,win-libfuzzer-asan-rel,linux-centipede-asan-rel\n\nOriginal change\u0027s description:\n\u003e [Fuzzing] Fix ICU initialization.\n\u003e\n\u003e Move environment initialization so it is handled correctly from\n\u003e an APK execution. Due to how the JVM initializes variables if\n\u003e the environment is defined outside LLVMFuzzer initialization\n\u003e it crashes.\n\u003e\n\u003e Bug: 500525162\n\u003e Change-Id: I5bddaae50dcc00387612625bd1798e3c02cfb314\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7815198\n\u003e Reviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\n\u003e Commit-Queue: Edgar Aguilar \u003celedgar@google.com\u003e\n\u003e Reviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1634414}\n\nBug: 500525162\nChange-Id: I892a9655ed92fcde8e3213e477c792525cfa16e6\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7870262\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Matt Mueller \u003cmattm@chromium.org\u003e\nCommit-Queue: Edgar Aguilar \u003celedgar@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1636301}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 20a210246734dc76dbcb742920671e3f08ca7d65\n" }, { "commit": "003b352d87c1d3d52785d6d04318f490f22059ef", "tree": "19967c9389834625ff1490995a1aeb7c37f999ca", "parents": [ "53a80153be7bb3244b621626402603b33525bc49" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Tue May 26 14:32:31 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 26 14:34:27 2026" }, "message": "[fuzzing] Add experimental Fuzzilli profile for Mojo CredentialManager\n\nThis CL adds a Fuzzilli profile, MojoCredentialManagerProfile.swift, for\nfuzzing the CredentialManager Mojo interface. Dependencies of the\nCredentialManager profile are placed in MojoCommonProfile.swift,\nfollowing the example set by the V8 team with the\nV8CommonProfile.swift[1].\n\n[1]: https://github.com/googleprojectzero/fuzzilli/blob/515d05c29245b8d5fdf3a474d974422984acab5b/Sources/Fuzzilli/Profiles/V8CommonProfile.swift\n\nBug: 479225937\nChange-Id: Ia704fb39193150f13b5cf3410b64c15eadd59863\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7848308\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1636166}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0d242c0568da43c3bd86a9f6c02a767ce2ebf61a\n" }, { "commit": "53a80153be7bb3244b621626402603b33525bc49", "tree": "ee3d6f56333574a3c4f3153e3e1e106b1adeee14", "parents": [ "38a0e2ae86776a8f4abb830aa22aeeb9309ce318" ], "author": { "name": "Takuto Ikuta", "email": "tikuta@chromium.org", "time": "Tue May 26 13:13:14 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 26 13:16:24 2026" }, "message": "siso: enable remote execution for fuzzilli idl fuzzer generator\n\nRemove fuzzilli_idl_fuzzing/generator.py from denylist.star. Also:\n- Convert action(\"chrome_profile_generator\") to action_with_pydeps and\n generate generator.pydeps to ensure required blink web_idl scripts\n and jinja2 assets are resolved and sent to RBE.\n- Add web_idl_database_filepath to inputs list to prevent missing\n database pickle error on remote execution.\n\nBug: 513105742\nChange-Id: I61abb8a7b8135627ab3ea48540c93a6a2ec1ebe2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7867401\nAuto-Submit: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCommit-Queue: Nico Weber \u003cthakis@chromium.org\u003e\nReviewed-by: Matthias Liedtke \u003cmliedtke@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1636114}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 9d088e421f3e330ddd823c884b2ceeb7ad3a70bd\n" }, { "commit": "38a0e2ae86776a8f4abb830aa22aeeb9309ce318", "tree": "ddfdbb0026eaa3f976687bc72523f9d6534cb5d6", "parents": [ "326b02c4c33512f8ecb255a3e3202a9ca0aca114" ], "author": { "name": "James Price", "email": "jrprice@google.com", "time": "Wed May 20 22:23:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 20 22:24:36 2026" }, "message": "[fuzzing] Add dict_deps attribute to fuzzer_test\n\nThis allows a project to generate the dictionary file at build time\nusing other targets.\n\nBug: 513255285\nChange-Id: I15f012b46b76a23742e520ac924c8a817f88a3ca\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7858844\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCommit-Queue: James Price \u003cjrprice@google.com\u003e\nAuto-Submit: James Price \u003cjrprice@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1633869}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: c5f7aef82ca919ea91436f88fd30619c243132dc\n" }, { "commit": "326b02c4c33512f8ecb255a3e3202a9ca0aca114", "tree": "66375f9cfaa0bb86ff75dbfdf1d10aa81ea070d0", "parents": [ "0ddb42447f3e2ceb26a6eba2c4476d1d9266f5e4" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Tue May 19 14:26:28 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 19 14:27:54 2026" }, "message": "[fuzzing] Rename ChromiumMojoProfile to MojoLockManagerProfile\n\nChromiumMojoProfile is too generic a name, since the profile\nspecifically targets the LockManager interface only.\n\nBug: 500007927\nChange-Id: I4108e3ba567428387775d9d2e2ce89a0af32012c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7848686\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1632847}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 21635190b4d86391786854705fe9b6b47511e29f\n" }, { "commit": "0ddb42447f3e2ceb26a6eba2c4476d1d9266f5e4", "tree": "7f8d1230aa28686b5e59073599a20ccd7d04e508", "parents": [ "e4284023a27f90666b39b421380377224cbf9852" ], "author": { "name": "Matt Stark", "email": "msta@google.com", "time": "Tue May 19 07:55:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue May 19 07:56:26 2026" }, "message": "Run `gn format` on all BUILD.gn files.\n\nNO_IFTTT\u003dFormatting change only\n\nLink: https://chromium-review.googlesource.com/id/I94ec311d69c76b9f85351c08b4d3bd216a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7858711\nReviewed-by: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nOwners-Override: Takuto Ikuta \u003ctikuta@chromium.org\u003e\nCommit-Queue: Matt Stark \u003cmsta@google.com\u003e\nSLSA-Policy-Verified: SLSA Policy Verification Service \u003cdevtools-gerritcodereview-exitgate@google.com\u003e\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1632679}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ad14f9bebfdee678ba25da9430c2d5c3b00d6a11\n" }, { "commit": "e4284023a27f90666b39b421380377224cbf9852", "tree": "d0c7657135e35d8845d67005d4f88d94a268081b", "parents": [ "bc46aa9187bda8f1572029e2f757dd93b52b35c1" ], "author": { "name": "Alex Kallam", "email": "aakallam@chromium.org", "time": "Fri May 15 19:58:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 15 20:01:21 2026" }, "message": "[Fuzzing] Add benchmark fuzzer variations that use FUZZ_TEST\n\nThese are functionally the same as `string_compare_fuzzer` but use\ndifferent features available from FuzzTest.\n\nBug: 477012312\nChange-Id: I4408c1835a429f88886c124887df4e716a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7727253\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Alex Kallam \u003caakallam@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1631484}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: a140436e994f4b429eff0f9f66863baa0316ddef\n" }, { "commit": "bc46aa9187bda8f1572029e2f757dd93b52b35c1", "tree": "b0bb04a16bf7947a58e0ecfa4d3d68b50728b4ab", "parents": [ "9f859090c35f505e38544fee56660b10a61d4d94" ], "author": { "name": "Alex Kallam", "email": "aakallam@chromium.org", "time": "Wed May 13 21:10:26 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed May 13 21:13:11 2026" }, "message": "[Fuzzing] Add FuzzTest\u0027s LLVM wrapper to \"fuzzer_test\" template\n\nWhen running LLVMFuzzerTestOneInput fuzzers with Centipede, FuzzTest\u0027s\nLLVM wrapper is used instead of linking libFuzzer so that the fuzzer is\nrun as a FUZZ_TEST.\n\nThe `fuzzer_test` template is used by many fuzzer types, not just the\nones that define LLVMFuzzerTestOneInput, so if they are not excluded by\nseed_corpus or dict restrictions, they are manually annotated with\n`exclude_wrapper` to prevent build errors.\n\nBug: 505045921\nChange-Id: I25c3cac99ce34d7c9300e317313f4b276a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7737502\nReviewed-by: Maks Orlovich \u003cmorlovich@chromium.org\u003e\nCommit-Queue: Alex Kallam \u003caakallam@chromium.org\u003e\nReviewed-by: Etienne Bergeron \u003cetienneb@chromium.org\u003e\nReviewed-by: Daniel Cheng \u003cdcheng@chromium.org\u003e\nReviewed-by: Andy Phan \u003candyphan@chromium.org\u003e\nReviewed-by: Seung Jae Lim \u003candysjlim@chromium.org\u003e\nReviewed-by: Colin Blundell \u003cblundell@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1630207}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 19a34a0ff623795257cef1d80142006167061740\n" }, { "commit": "9f859090c35f505e38544fee56660b10a61d4d94", "tree": "64d1daab490100b7bcf08ac4bd4b36e89fe50be9", "parents": [ "7b8c40391ec1ee98a71bdb208bddf91433bd7aac" ], "author": { "name": "Alex Kallam", "email": "aakallam@chromium.org", "time": "Thu May 07 18:28:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu May 07 18:30:31 2026" }, "message": "[Fuzzing] Add stub for \"is_fuzztest_compatible\" attribute\n\ncrrev.com/c/7737502 implements this attribute but this stub is needed so\nthat a downstream package can set the attribute before one of its\nfuzzers is broken by the wrapper.\n\nThe attribute is added to \"string_compare_fuzzer\" to verify that it is\ncorrectly ignored.\n\nBug: 505045921\nChange-Id: I71dac59a8faa65127e078d1853c79f986a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7829017\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Alex Kallam \u003caakallam@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1627085}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2fbc99da916159e8484c1998930c5f51155ac119\n" }, { "commit": "7b8c40391ec1ee98a71bdb208bddf91433bd7aac", "tree": "3eba3315b28f0aee6a7ef28d87b13e8726f01719", "parents": [ "81c9ae6d2c15729e4bdaec6d650b3a54134f27c3" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Mon May 04 17:56:24 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon May 04 17:58:35 2026" }, "message": "[Fuzzing] Fix ICU deps and initialization.\n\nMove environment initialization so it is handled correctly from\nan APK execution. Due to how the JVM initializes variables if\nthe environment is defined outside LLVMFuzzer initialization\nit crashes.\n\nUpdating fuzzers in testing/libfuzzer\n\nThis CL was uploaded by git cl split.\n\nR\u003dtitouan@chromium.org\n\nBug: 500525162\nChange-Id: I1ad165e1431149e6749db3f72860365c48485c85\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7809132\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Edgar Aguilar \u003celedgar@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1624814}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f25fcb66f4dc3617e39af117a6e8f34117491d74\n" }, { "commit": "81c9ae6d2c15729e4bdaec6d650b3a54134f27c3", "tree": "cbcb2e19ae3175e99d3564a2a089dacad32e6599", "parents": [ "8b417b5417500996b408812257375f2017319b7d" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Fri May 01 20:19:22 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri May 01 20:21:46 2026" }, "message": "fuzzing: Fix coverage dashboard link in docs\n\nA recent change to centralize URLs broke it.\n\nBug: 478226234\nChange-Id: I42bbb48204b080dc84e46e69922c3c01b29b81e4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7807653\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nAuto-Submit: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1624032}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3643ad8a1dc6f65609f210aeff2bbb27c9346b57\n" }, { "commit": "8b417b5417500996b408812257375f2017319b7d", "tree": "8679ac15ca998cd989d56d4ebbb569628f092fba", "parents": [ "7f27ba96d41feead5c663e3ce1c6b8f574585c96" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Fri Apr 24 13:30:30 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Apr 24 13:32:38 2026" }, "message": "fuzzing: Add enums and method arg generation to Mojo profile\n\nThe `requestLock` method uses enum parameters (`WaitMode` and\n`LockMode`) to dictate behavioral flow. In the Fuzzilli profile, they\nare now defined as integers, which means that Fuzzilli will use any\ninteger in `requestLock` invocations generated outside of\n`MojoRequestLockGenerator`. Not only does this pattern result in many\nwasted Fuzzilli executions, since the underlying C++ code immediately\nrejects invalid values for these enums, it also places a burden on\nprofile developers to write custom CodeGenerators for any methods that\nuse enums. With the update of `WaitMode` and `LockMode` to be\n`intEnumeration`s, Fuzzilli can reliably generate valid values for the\n`requestLock` call without `MojoRequestLockGenerator`.\n\nMoreover, the profile\u0027s `MojoMethodCallGenerator` uses ProgramBuilder\u0027s\n`randomArguments` method to get the arguments for a method call.\nConsequently, Fuzzilli will regularly provide arguments of invalid\ntypes, tanking correctness and wasting executions. With the update to\n`findOrGenerateArguments`, `MojoMethodCallGenerator` will find or\ngenerate objects of the exact type required, ensuring very high\ncorrectness.\n\nThis CL also simplifies and corrects objects generation. Fuzzilli uses\nbuiltins to generate types via constructor. Since many of the builtins\ncannot be constructed, they have been removed from the array.\n\n`intEnumeration` details:\nhttps://github.com/googleprojectzero/fuzzilli/commit/17ac8a6f7826ac6d211419647931cd848774d408\n\nFixed: 500007927\nChange-Id: I2f8c4e53532ca56e293d159bc37a015e4cf6c1e4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7786319\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1620129}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 083dddabff2288d0597ed99922f45d77402f1986\n" }, { "commit": "7f27ba96d41feead5c663e3ce1c6b8f574585c96", "tree": "2210d45fcb1ae1bf18169e3e4aab882f34e5bbe6", "parents": [ "9f865770fbf664dbcfc01fa52b2c8ec4c0c5c956" ], "author": { "name": "Edgar Aguilar", "email": "eledgar@google.com", "time": "Fri Apr 24 01:16:36 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Apr 24 01:18:51 2026" }, "message": "Fuzzing: Default Android libFuzzer targets to APKs\n\nModifies the fuzzer_test template to default to building Android fuzzers\nas APKs rather than raw executables.\n\nUpdates fuzzers with strict visibility dependencies to align them with\nthe APK packaging\n\nBug: 447601949\nChange-Id: I0707b0f90d016569ca61a63fac29b6a8cb0bedf5\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7759418\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Edgar Aguilar \u003celedgar@google.com\u003e\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1619896}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b9ee863a98e745238818beb6de8a4c383c685d7d\n" }, { "commit": "9f865770fbf664dbcfc01fa52b2c8ec4c0c5c956", "tree": "fe20e9bc9e0526d694fa2a7383c1007d1377e5e6", "parents": [ "be04da013a48c08e6db3ff964644273eaa1a1d84" ], "author": { "name": "Christoph Diehl", "email": "chdieh@microsoft.com", "time": "Mon Apr 20 23:46:47 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 20 23:49:17 2026" }, "message": "Allow Windows for Google FuzzTest\n\nI recently added Windows support for Google FuzzTest here https://github.com/google/fuzztest/pull/1994 and I was internally (Edge) pinning CIPD to that hash and had this patch locally for experimentation in place. I was made aware that you guys rolled FuzzTest deps which includes that above PR. Please consider to merge this.\n\nChange-Id: I6d031f241af572ca9713bd7c2f943159e05401a4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7749717\nReviewed-by: Ben Pastene \u003cbpastene@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1617861}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: be6f9dbf9ca3d61d543433d4b5f1e94535ff67cd\n" }, { "commit": "be04da013a48c08e6db3ff964644273eaa1a1d84", "tree": "ded4318f419466b3e1a421da8f9cbbed6f4a40d1", "parents": [ "254202e7ef810c6402ee5f7da1273d41d827aa6c" ], "author": { "name": "Philipp Hancke", "email": "philipp.hancke@googlemail.com", "time": "Mon Apr 20 19:17:46 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 20 19:20:44 2026" }, "message": "libfuzzer: update srtp fuzzer for libsrtp changes\n\nwhich after the update to 2.8.0 support \"null auth\" as described in\n https://github.com/cisco/libsrtp/pull/760\nwhich has a key length of 0 which led to a harmless assert.\n\nBug: chromium:503542607\nChange-Id: I8b25049b326633d6549a53c1bdd4b3f031433004\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7778569\nReviewed-by: Harald Alvestrand \u003chta@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Philipp Hancke \u003cphilipp.hancke@googlemail.com\u003e\nCr-Commit-Position: refs/heads/main@{#1617687}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b26866357e3e03277d76f4ea50c22e4426e37aaf\n" }, { "commit": "254202e7ef810c6402ee5f7da1273d41d827aa6c", "tree": "4d45c0ec9e56f229c7e5d32f51390f38abb86df1", "parents": [ "21bde772ddc059b402a1693a315367214beb4a40" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Mon Apr 13 17:23:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 17:26:23 2026" }, "message": "fuzzing: Format ChromiumMojoProfile according to Fuzzilli style\n\nThe Fuzzilli repository recently introduced a .swift-format file[1] with\nformatting rules. This CL reformats ChromiumMojoProfile.swift, a\nFuzzilli profile, according to these formatting rules.\n\n[1]: https://github.com/googleprojectzero/fuzzilli/blob/0f65b69f8026cec47162b30e5ac818fbc64a2f27/.swift-format\n\nBug: 500007927\nChange-Id: Ia88bfbf57dfbf7eae8796f006f666f639dfccac4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7753441\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613824}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 837410bd95665132b59b095afb8d7bc49ecd7d5a\n" }, { "commit": "21bde772ddc059b402a1693a315367214beb4a40", "tree": "e0500f08375d325206ed3e22758576099cb8820b", "parents": [ "330e3d1ecbcbc43d3ebbb81a054b461e0259618b" ], "author": { "name": "Jon Toohill", "email": "jtoohill@google.com", "time": "Mon Apr 13 14:16:01 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Apr 13 14:19:09 2026" }, "message": "Remove use_afl GN arg and AFL_DRIVER_DONT_DEFER env var\n\nBug: 492241998\nChange-Id: I2cabb81cf7c351aa997ea95978dc74476a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7744749\nReviewed-by: Junji Watanabe \u003cjwata@google.com\u003e\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1613687}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b691d02d149ce14ee30ef48267f9f1990a4380e0\n" }, { "commit": "330e3d1ecbcbc43d3ebbb81a054b461e0259618b", "tree": "cf47cd795ca0f1c30e9336a2c386c6fc5ad85a9c", "parents": [ "6ebde071af33127584b97615c52f7cd9c24c1823" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Wed Apr 08 19:47:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Apr 08 19:50:03 2026" }, "message": "fuzzing: Update Mojo Fuzzilli profile\u0027s CodeGenerators and types\n\nThis CL updates the Fuzzilli profile used for fuzzing the LockManager\nMojo interface in order to boost fuzzing coverage.\n\nThe current profile file does not annotate all the added Mojo ILType\nobjects with all pertinent details. For example, the object for the\nLockManagerRemote type is missing the available methods. Some objects\nare missing the available properties, as is the case with\nLockHandleRemote. To ensure that Fuzzilli can easily find and fuzz APIs,\nthis CL ensures target objects are thoroughly populated with relevant\nmethod and property information.\n\nCurrently, Fuzzilli spends too much time producing random JavaScript\ncode instead of fuzzing the Mojo objects provided. To avoid this, nearly\nall default CodeGenerators are disabled. In their place, this CL\nprovides various Mojo-specific CodeGenerators that operate specifically\non the relevant Mojo objects. As a result, Fuzzilli generates nearly\nexclusively Mojo code.\n\nOnce integer enumeration support is added to Fuzzilli, the typings of\njsLockMode and jsWaitMode can be updated, and the profile can begin to\nrely on more generic CodeGenerators. As it stands, without the interface\nspecific logic of `RequestLockGenerator`, Fuzzilli suffers from low\ncorrectness.\n\nBug: 500007927\nChange-Id: I8642d4c82fd510420bf4cf70e846f29d00896adf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7731723\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1611732}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0d8f2cf229d25c24fa671106c608ab7dfe800a90\n" }, { "commit": "6ebde071af33127584b97615c52f7cd9c24c1823", "tree": "4ab22f38a47d420a14c0198091d7d05f1248cb95", "parents": [ "c7ee834c77947fa66ec489f49db798bc142e3ce7" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Thu Apr 02 17:29:08 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Apr 02 17:31:04 2026" }, "message": "Update FuzzTest getting started guide\n\nChanges include:\n- Noting that libfuzzer is deprecated.\n- Removing the redundant \"How to fuzz\" summary.\n- Simplifying instructions for configuring build targets.\n- Reordering sections in the logical order (instructions for writing\n tests are now before the instruction for configuring the build target\n with the tests).\n- Updating Domain Reference link with direct link.\n\nBug: 478226234\nChange-Id: Id2f0330e49b1249a5dbb78777f0f2db36e136573\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7704585\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1609324}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d97e5b06323e50eed1596e25fd43f2501a8fcf45\n" }, { "commit": "c7ee834c77947fa66ec489f49db798bc142e3ce7", "tree": "fb9e946d4619274c5a3620bd4ad7821ca478bcb9", "parents": [ "6369c60284db43efde58f284c9ae3cb7501be998" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Wed Mar 25 20:17:40 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 25 20:20:43 2026" }, "message": "fuzzilli: Handle cases where js_in_process_fuzzer is launched without FDs\n\nFuzzilli uses three FDs to communicate with our binary: 100, 101, and\n102. When our binary starts, it executes a handshake with fuzzilli using\nthese FDs and then receives JS scripts and executes them. When starting\nup, Fuzzilli launches the target binary without opening these FDs.\n\nWe don\u0027t check that these FDs are opened or that they have the expected\ntype, so reading and writing to them causes problems when Fuzzilli or\ndevelopers launch the binary directly.\n\nFor example, when asan is enabled, these FDs would point to GPU cache\nfiles, so the handshake would fail. When asan is disabled, the FDs would\npoint to themselves, so the handshake succeeds but then we enter an\ninfinite loop.\n\nThis CL fixes this by checking that the FDs are opened and have the\nexpected types i.e. pipes, and regular files.\n\nAn added benefit of gracefully handling these cases is that when agents\ntry to run js_in_process_fuzzer directly, it will no longer crash and\ncause the agents to get side tracked.\n\nFixed: 496140400\nChange-Id: Ifb65ccced16da0f4814d810dc7d02b2dc986ef44\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7701655\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1605063}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 2af78345fd233ba4872ce8f485104ed5a03c9cf0\n" }, { "commit": "6369c60284db43efde58f284c9ae3cb7501be998", "tree": "fb5807ebfa9c264ce0c2a2f35028c8723c553adc", "parents": [ "7a9f17db5a945df7fc9955dfe32266067ffd59fc" ], "author": { "name": "Dylan Jew", "email": "dylanj@google.com", "time": "Wed Mar 25 16:04:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 25 16:07:04 2026" }, "message": "Add documentation for running local coverage for blackbox fuzzers\n\nAdds instructions on how to run the\ntools/code_coverage/view_fuzzer_coverage.py script locally for blackbox\nfuzzers. Assumes you already know how to run your blackbox fuzzer\nlocally, and can point it to the directory of output files that your\nfuzzer generated.\n\nBug: 488980790\nChange-Id: I7e7fd8c38873f56ff2f229d7bb67a9936a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7684420\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCommit-Queue: Dylan Jew \u003cdylanj@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1604868}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: f4d622e250237829c8cbd5b73f02c5ea2bb6687c\n" }, { "commit": "7a9f17db5a945df7fc9955dfe32266067ffd59fc", "tree": "8f3c44ee546b265069589dd11ea0cf292f3e4f29", "parents": [ "98dc899576ab44dfc54ac48651a331f346aecbd1" ], "author": { "name": "Jon Toohill", "email": "jtoohill@google.com", "time": "Mon Mar 23 20:39:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 23 20:42:17 2026" }, "message": "infra: Remove linux-afl-asan-rel builder.\n\nIt\u0027s been broken for over a year. Also removes the `afl` GN config and\ndocumentation references to AFL.\n\nRemoving `use_afl` and //third_party/afl will come next.\n\nBug: 492241998\nChange-Id: I5826fac8163f3a4cf1e7cc5e5e7cfb346a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7693755\nCommit-Queue: Ben Pastene \u003cbpastene@chromium.org\u003e\nReviewed-by: Ben Pastene \u003cbpastene@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nAuto-Submit: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1603675}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 45a34c12f3680536cc424e020e030cdf3b9fc8b6\n" }, { "commit": "98dc899576ab44dfc54ac48651a331f346aecbd1", "tree": "54bef204c6382c60a1adb36eefd48bbbb9678597", "parents": [ "a0b75aed1d4137b675e8b063b9390742fa6ff4aa" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Wed Mar 18 16:18:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 18 16:21:30 2026" }, "message": "spanification of libyuv_scale_fuzzer.cc and advance of RNG state preservation.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli\n\nThe random number generator state is passed as a copy to the\nFillBufferWithRandomData, so the outer rng is never advanced making the\nthree palnes populated with the exact same sequence of random numbers,\nreducing the entropy and effectiveness of the fuzzer. With this change\nthe RNG is passed as a reference and its state is preserved and advanced\nas expected.\n\ngemini-run/batch-run-1761662609/group_2\n\nBUG: 439964610\nChange-Id: I734f12c47738d4ffbea696945346aeadb3e19055\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7654277\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nReviewed-by: Arthur Sonzogni \u003carthursonzogni@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1601344}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0924c5bd7041b238e0dabd2321b2863b59a60e97\n" }, { "commit": "a0b75aed1d4137b675e8b063b9390742fa6ff4aa", "tree": "d7d9dd6cf89a6c72c5092b5c4cea54f05f46cfe6", "parents": [ "a09d055e6eeaafaa67c84ff6b8d4263dece63fe0" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Wed Mar 18 13:33:03 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 18 13:35:52 2026" }, "message": "Update fuzzing documentation to emphasize FuzzTest for new targets.\n\nThis change clarifies that FuzzTest is required for all new fuzz targets\nin Chromium, while libFuzzer should only be used for maintaining\nexisting targets.\n\nIt also adds back a link to information on blackbox fuzzing.\n\nBug: 478226234\nChange-Id: Ia7a442ed34a785b5484f730a9b9dc30ad9a92350\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7668952\nCommit-Queue: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1601227}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 27c0e81e858375cb621dc2f522222a7f269c6fe7\n" }, { "commit": "a09d055e6eeaafaa67c84ff6b8d4263dece63fe0", "tree": "a7a4dc862488041ebb427a8c5508524e5c77398f", "parents": [ "8f72f0f652a70f185a6ae045fa61d50330bed434" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Tue Mar 17 22:34:04 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Mar 17 22:36:38 2026" }, "message": "Improve fuzz test coverage generation guide\n\nRefactors the guide to improve clarity. Also, adds instructions on how\nto view the generated coverage report when building on a remote machine.\n\nBug: b:478226234\nChange-Id: I3b8f14d0a4734a764261c4492c1eeb1908f3bb18\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7674321\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1600846}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: aa097354e6d4c364bd784ea941db94898c2b396e\n" }, { "commit": "8f72f0f652a70f185a6ae045fa61d50330bed434", "tree": "186d1d83f14a8021d19b16d2e4f449d072e59bce", "parents": [ "8da2ccc99a96949e808646bbe1fdf697e67dc707" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Mon Mar 16 20:22:35 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 16 20:25:38 2026" }, "message": "Rewrite Chromium fuzzing README for clarity\n\nUpdates the landing page for go/crfuzz so it\u0027s easier for new users to\nfollow.\n\nSpecifically, this update:\n- Adds a note at the top directing users to the ClusterFuzz crash\nreproduction guide.\n- Provides a comparison between FuzzTest and libfuzzer to help\ndevelopers choose the right framework for their use case.\n- Adds a \"Getting help\" section.\n- Replaces the outdated ChromeOS link.\n- Removes links to an outdated blog post and issues filed.\n\nBug: 478226234\nChange-Id: Ibdc0541f483045f5a1b2f5a332df78f749e2b79b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7656780\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCommit-Queue: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1600080}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: ab075eac4aa82b689ce3558b5fa72f30b54640e1\n" }, { "commit": "8da2ccc99a96949e808646bbe1fdf697e67dc707", "tree": "62207ca4c2f1998cf190feff6d8f285520834374", "parents": [ "0c8ecc324d212b008e058b77fa1921f0894dd762" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Thu Mar 12 20:19:10 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 12 20:25:04 2026" }, "message": "fuzzilli: Remove unnecessary import\n\nChromiumMojoProfile.swift is already part of the Fuzzilli module so we\ndon\u0027t need to import `fuzzilli`, which was throwing a warning.\n\nBug: 488980791\nChange-Id: Ie2f5f4bd2574245c899c0b12e8c1cde37e266cb1\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7662265\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1598627}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 253cef9522152e66ff9bf2b6f53104990e878297\n" }, { "commit": "0c8ecc324d212b008e058b77fa1921f0894dd762", "tree": "ee40831c4b875b2e83a6bdadb3f983d65a02ae35", "parents": [ "52ebc6fe41ce597c2953f4e3465ea6b889bcade0" ], "author": { "name": "Dylan Jew", "email": "dylanj@google.com", "time": "Wed Mar 11 15:51:34 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 11 15:55:54 2026" }, "message": "Replace blackbox fuzzer clusterfuzz set up link with reference page\n\nThe reference page helps explain blackbox fuzzers and the difference\ncompared to coverage guided fuzzing. This seems like a better starting\npoint in\nhttps://chromium.googlesource.com/chromium/src/+/HEAD/testing/libfuzzer/README.md\nrather than how to set up a job to run your blackbox fuzzer in\nclusterfuzz.\n\nChange-Id: Ia2b4cd822841d92d1d028047ddbfa05b6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7653101\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Dylan Jew \u003cdylanj@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1597786}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b30ba781c4abd4b5d9d0e95d03bd66e7147ea08e\n" }, { "commit": "52ebc6fe41ce597c2953f4e3465ea6b889bcade0", "tree": "f55bfb4af58c9e4fbb826e69cb9cd85a67c272b4", "parents": [ "795d546421d3b0f748618646785a378b85578206" ], "author": { "name": "Tigran Bantikyan", "email": "bantikyan@google.com", "time": "Wed Mar 11 00:50:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Mar 11 00:54:54 2026" }, "message": "[fuzzilli] Add v8:fuzzilli_cov as fuzzilli driver dependency\n\nhttps://crrev.com/c/7638570 split cov.h and cov.cc into their own\ntarget, v8:fuzzilli_cov, to facilitate component builds with coverage.\nThis change follows up by adding the newly split target as a dependency\nfor fuzzilli driver.\n\nBug: 489004530\nChange-Id: I77535a588fc6eab7c291bb279b97d3e189a58b79\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7653456\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCommit-Queue: Tigran Bantikyan \u003cbantikyan@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1597439}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: eb57c723b6188dea91dc5cf607db17f8ba973f0a\n" }, { "commit": "795d546421d3b0f748618646785a378b85578206", "tree": "976ff0a91928e5b844ab1c7a45f1e9be965799df", "parents": [ "ada206168442cc225508f048b8e6ffc887ecb93d" ], "author": { "name": "Jeremy Leconte", "email": "jleconte@google.com", "time": "Fri Mar 06 20:40:07 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 06 20:45:19 2026" }, "message": "Wrap libfuzzer_base_wrappers under use_fuzztest_wrapper\n\nlibfuzzer_base_wrappers pulls a dependency on //base and breaks WebRTC:\n\nERROR at //testing/libfuzzer/BUILD.gn:187:12: Can\u0027t load input file.\n deps \u003d [ \"//base:compiler_specific\" ]\n\nBug: None\nChange-Id: I2af5e3043e0a7ec4c34309971f0f823f87e2f16c\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7642289\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Jeremy Leconte \u003cjleconte@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1595619}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: daca22d462976debf92bf6d678972fb58731cc7e\n" }, { "commit": "ada206168442cc225508f048b8e6ffc887ecb93d", "tree": "7187f86c69349d02ca057f6065ac82afb9b262fb", "parents": [ "7015e9629f042a9bc3be2a92cbddd90ae9731bfc" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Fri Mar 06 17:51:06 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Mar 06 17:57:13 2026" }, "message": "Add local code coverage guide for fuzz tests\n\nBug: b:478226234\nChange-Id: I3313ae6a85fd099578e86525a2561f99e1e955ec\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7628485\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCommit-Queue: Jocelyn Tran \u003cjocelyntran@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1595465}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: bcb9cca47db093213c4877166ef8039003841f9f\n" }, { "commit": "7015e9629f042a9bc3be2a92cbddd90ae9731bfc", "tree": "082e6d8fd526a7b5b957c2769a27a657f30b419e", "parents": [ "18a885b10e5eab2a6111c3af40e746942bb4506b" ], "author": { "name": "Jocelyn Tran", "email": "jocelyntran@google.com", "time": "Thu Mar 05 20:50:05 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 05 20:54:01 2026" }, "message": "Add blackbox fuzzer crash reproduction steps\n\nAdd instructions for reproducing blackbox fuzzer crashes and a section\nto distinguish between crashes from blackbox fuzzers and from fuzzing\nengines.\n\nThis CL also polishes some indenting for better readability.\n\nChange-Id: Idcb4a01bca9a7cf6f61d47e5d03443a24fb19909\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7634242\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1594890}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 83ac670959073c713df5601af5a7c253cf57d42c\n" }, { "commit": "18a885b10e5eab2a6111c3af40e746942bb4506b", "tree": "3a207ebc295ce688f01ef6241f167bb8bc69c0b7", "parents": [ "abf7376aff8be2c3abc9a3896b4632cba9de26df" ], "author": { "name": "Andrew Paseltiner", "email": "apaseltiner@chromium.org", "time": "Thu Mar 05 20:23:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Mar 05 20:28:56 2026" }, "message": "Add macro for wrapping LLVMFuzzerTestOneInput with spanified inputs\n\nThis will prevent all users of LLVMFuzzerTestOneInput from having to use\ntheir own UNSAFE_BUFFERS annotations alongside manual construction of\nbase::span\u003cconst uint8_t\u003e.\n\nIn this CL, we demonstrate usage of the new macro with some of the\nfuzzers under testing/libfuzzer/fuzzers. Followup CLs will apply the\nsame transformation to fuzzers outside this directory.\n\nBug: 351564777\nChange-Id: I73283ded38daf505d7166e0aa452d0ba20d3de7b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7638171\nReviewed-by: Jon Toohill \u003cjtoohill@google.com\u003e\nCommit-Queue: Jon Toohill \u003cjtoohill@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1594879}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 5990b7366c12ac9102276663d7ae6069faae6b76\n" }, { "commit": "abf7376aff8be2c3abc9a3896b4632cba9de26df", "tree": "ac4b8ca3490c894e85d232ecbdf91ce23cd73523", "parents": [ "e62e113ea5e39f7a1864a1cafe6dde02932375be" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Mon Mar 02 22:08:29 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Mar 02 22:14:18 2026" }, "message": "fuzzing: Implement Mojo Fuzzer Profile and Resources\n\nThis adds a Fuzzilli profile (`ChromiumMojoProfile.swift`) for fuzzing\nthe LockManager Mojo interface and updates the `js_in_process_fuzzer` to\nserve and load the corresponding resources (mojom JavaScript bindings).\n\nBug: 477639524\nChange-Id: I6f661ce09183528bfe2069bcafeae2375f9cd6e4\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7585913\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1592732}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4c15d83d278a3c41c32e3deeb0655c95ed533bfd\n" }, { "commit": "e62e113ea5e39f7a1864a1cafe6dde02932375be", "tree": "a70e73be85cb994691d3ba45b49ac9b3cbd8c03b", "parents": [ "d9dd2c277e166ff1a9f74a2ec936d13236c70413" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Thu Feb 19 21:27:00 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Feb 19 21:31:25 2026" }, "message": "fuzzilli: Fix Fuzzilli driver crash by forcing coverage linkage\n\nThis CL fixes a crash in the Fuzzilli driver caused by the linker\ndropping (`cov.o`) when the explicit call to\n`sanitizer_cov_reset_edgeguards()` is removed.\n`sanitizer_cov_reset_edgeguards()` is a noop when fuzzing Chromium.\n\nChanges:\n 1. Calls `fuzzilli_cov_enable()` at startup to create a strong\n reference to `cov.o`, ensuring the custom Fuzzilli coverage hooks\n are linked.\n 2. Removes `sanitizer_cov_reset_edgeguards()` from the main loop\n since it\u0027s a noop when fuzzing Chromium.\n\nBug: 477639524\nChange-Id: I71318b4e64073635703123a21d6b4ac66a13fe20\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7551313\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1587382}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 33dc8c08b9b9b7d581846404a50f2d2f3234b8b5\n" }, { "commit": "d9dd2c277e166ff1a9f74a2ec936d13236c70413", "tree": "efa16996e8e34318a2175a2329fedc157442c2a9", "parents": [ "5365477882c5261b67f03f947405f2b9fd6b7653" ], "author": { "name": "Justin Cohen", "email": "justincohen@google.com", "time": "Wed Feb 18 22:00:48 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Feb 18 22:05:47 2026" }, "message": "Update OWNERS for fuzzer_support_ios.\n\nReplace ajuma@ with rohitrao@ and justincohen@ in OWNERS.\n\nChange-Id: I39199205118f1b4c4abc1520cead8cb4dcfb1fee\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7589084\nAuto-Submit: Justin Cohen \u003cjustincohen@google.com\u003e\nReviewed-by: Rohit Rao \u003crohitrao@chromium.org\u003e\nCommit-Queue: Ali Juma \u003cajuma@chromium.org\u003e\nReviewed-by: Ali Juma \u003cajuma@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1586682}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b1aa11c94046117f87e9d5585266dd8b2fe29c50\n" }, { "commit": "5365477882c5261b67f03f947405f2b9fd6b7653", "tree": "7bfce73dc9e256d24d80777cd25d45fcdc9555ca", "parents": [ "4a67b63dc923c1d546c8eeee91cb301c2384090a" ], "author": { "name": "Owners Cleanup", "email": "swarming-tasks@owners-cleanup-prod.google.com.iam.gserviceaccount.com", "time": "Wed Feb 18 20:36:59 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Feb 18 20:43:59 2026" }, "message": "[owners] Remove zhaoyangli@chromium.org from testing/libfuzzer/fuzzer_support_ios/OWNERS\n\nThis suggested change is automatically generated based on group\nmemberships and affiliations.\n\nPlease approve this change and vote the highest CR. This will keep the\nOWNERS file tidy. We ask that you do not ignore this change and either\napprove it if the OWNER is no longer active or deny it if the OWNER is\ncontinuing to review CLs (including under a different affiliation).\nThis CL can always be reverted if the understanding changes.\n\nIf this change is in error, vote the lowest CR value (i.e. reject the\nCL) and the bot will abandon it.\n\nSee the owner\u0027s recent review activity for context:\nhttps://chromium-review.googlesource.com/q/zhaoyangli@chromium.org\n\nTo report an issue, file a bug in the Infra\u003eCodereview component.\n\nChange-Id: I01e5dde18f5473ed564c521855bc9990ca346e84\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7588176\nCommit-Queue: Ali Juma \u003cajuma@chromium.org\u003e\nReviewed-by: Ali Juma \u003cajuma@chromium.org\u003e\nAuto-Submit: Owners Cleanup \u003cswarming-tasks@owners-cleanup-prod.google.com.iam.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1586630}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7090c2058c070ee0fb18d018f03d3b2365964d2d\n" }, { "commit": "4a67b63dc923c1d546c8eeee91cb301c2384090a", "tree": "d487ea6e1f99055bbe44415300815f8cd3ca531e", "parents": [ "1d2fd2183c6305a104d1e61356178cf64a7efdfd" ], "author": { "name": "Jeffrey Yu", "email": "yuje@chromium.org", "time": "Mon Feb 09 20:08:09 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Feb 09 20:13:19 2026" }, "message": "Replace `std::unordered_map/std::set` with `base::fixed_flat_map/set`.\n\nBug: 473916362\nChange-Id: I9a25f7994da2f5535e18903966bc814653903299\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7553110\nAuto-Submit: Jeffrey Yu \u003cyuje@chromium.org\u003e\nCommit-Queue: Ben Pastene \u003cbpastene@chromium.org\u003e\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Ben Pastene \u003cbpastene@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1581959}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0a239f0e2218fc0e5b7b55b7b4677bb4f54b5f0b\n" }, { "commit": "1d2fd2183c6305a104d1e61356178cf64a7efdfd", "tree": "b3944e19a775850c907cebd0e205e78b7b3dc170", "parents": [ "12f4a81c1c7d0e42fabd7a740daf1332dcabbd7b" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Fri Feb 06 15:46:57 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 06 16:09:10 2026" }, "message": "fuzzing: Rename use_fuzzilli to use_chromium_fuzzilli\n\nThe `use_fuzzilli` variable is being renamed to `use_chromium_fuzzilli` to better\ndistinguish it from the `v8_fuzzilli` variable used in V8. This makes it\nclearer when Fuzzilli is being used only in a V8 context and when it\u0027s\nbeing used with Chromium.\n\nBug: 477639524\nChange-Id: I86cee5bb9a8732844af5eb8194b1caae248fba4b\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7540390\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1580844}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 781e7d23656100fa9190c5ce5c6d220d514a0ac1\n" }, { "commit": "12f4a81c1c7d0e42fabd7a740daf1332dcabbd7b", "tree": "82dc5b1360e56db425fd4fd6c831b62043595446", "parents": [ "793a2f3995e15a03b7bd9e66287634273fab6716" ], "author": { "name": "Titouan Rigoudy", "email": "titouan@google.com", "time": "Fri Feb 06 10:08:21 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Feb 06 10:14:03 2026" }, "message": "[Fuzzing] Update OWNERS to reflect team changes.\n\nChange-Id: I6d5cf6f2061877db6ab5ec65c83f628e6a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7535203\nReviewed-by: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1580690}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 00aac31b954ff01caa716b9747eba32f0c51e6f8\n" }, { "commit": "793a2f3995e15a03b7bd9e66287634273fab6716", "tree": "64a2d72e6f8bc8725e54600da8a27a9fbce0e3d1", "parents": [ "4cc44bb073bf433640945b3541ca11a28cfe2e80" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Tue Jan 27 18:37:56 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 27 18:43:44 2026" }, "message": "fuzzilli: Fix stack-buffer-overflow in Fuzzilli driver on shutdown\n\nThe driver treated 0-byte reads (EOF) from the control pipe as errors\nand attempted to log the `action_msg` buffer. This buffer was not\nnull-terminated, causing the logging operator to read past the stack\nallocation and trigger an ASan `stack-buffer-overflow`.\n\nCheck for EOF explicitly and exit cleanly with a warning. Use\n`base::as_string_view` to log received bytes safely based on the read\nlength. Distinguish between read errors (ERROR) and clean shutdown\n(WARNING).\n\nBug: 477639524\nChange-Id: Iad93d87acb5928f84da9f05f04698deba7693e57\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7513891\nCommit-Queue: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Alex Kallam \u003caakallam@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1575364}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 14d045fe1842e926579368cbf51e7daad1eb5ea1\n" }, { "commit": "4cc44bb073bf433640945b3541ca11a28cfe2e80", "tree": "a2d8cf3e314ee45488a6a1f442b031bbbe508b11", "parents": [ "5efe53e33d676d6428a54a7b2ba7d935f8eb2e5d" ], "author": { "name": "Ben Wagner", "email": "bungeman@chromium.org", "time": "Thu Jan 22 14:44:27 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Jan 22 14:49:44 2026" }, "message": "Update SkPath utilities to use SkPathBuilder\n\nThe versions of these functions which take SkPath as a destination are\ndeprecated. Instead use the versions which take SkPathBuilder.\n\nChange-Id: If7bf3baffc05e1a62130b8b67ba2e3a16050b83f\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7504975\nReviewed-by: Colin Blundell \u003cblundell@chromium.org\u003e\nCommit-Queue: Ben Wagner \u003cbungeman@google.com\u003e\nReviewed-by: Ben Pastene \u003cbpastene@chromium.org\u003e\nAuto-Submit: Ben Wagner \u003cbungeman@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1572959}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 8072f176cb3ef93a45c714296eb40921f6808b4a\n" }, { "commit": "5efe53e33d676d6428a54a7b2ba7d935f8eb2e5d", "tree": "92f7e3fe429203cc33ece456a27d90b6ecc5273f", "parents": [ "ac847388830e372cd042be7e94ad90d0c2858ea2" ], "author": { "name": "Alex Gough", "email": "ajgo@chromium.org", "time": "Wed Jan 14 22:30:37 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Jan 14 22:38:06 2026" }, "message": "Reland \"Allow StackTrace to probe for dbghelp on Windows\"\n\nThis is a reland of commit ab086808f8b2babc78bb68e85c2c9da93d00d412\n\nThe original change assumed dbghelp.dll was distributed with Chrome\nbut it is not, so this reland instead simply probes for dbghelp.dll\nby name, which will look in the dll directory on bots and system paths\nin deployed Chrome.\n\nIn addition, this CL accidentally fixes some libfuzzer tests which were\n\"passing\" by detecting a failure to symbolize a stack. As the dbhhelp\nprobe in base:: now allows symbols to be fetched in unsandboxed test\nprocesses these stacks are now valid, and the tests are updated to\ncheck for valid output:\n\n FuzzerStacktraceTest.SymbolizesUAF\n FuzzerStacktraceTest.SymbolizesCheck\n\nOriginal change\u0027s description:\n\u003e Allow StackTrace to probe for dbghelp on Windows\n\u003e\n\u003e Before this CL stacktraces in some developer builds would not be\n\u003e symbolized even when the sandbox allowed symbol loading. dbghelp is\n\u003e delayloaded on Windows and isn\u0027t available in some sandboxed processes -\n\u003e as symbol files cannot be loaded into these processes it isn\u0027t very\n\u003e useful. Sandboxed processes can still produce numeric stacks.\n\u003e\n\u003e This CL allows StackTrace() to probe for dbghelp dll and use it if it\n\u003e can be loaded. This is done by attempting to load the module, then\n\u003e forcing resolution of delayloaded functions. It cannot probe purely by\n\u003e calling the LoadAllImports helper as this results in a delayloading\n\u003e crash if the module cannot be loaded.\n\u003e\n\u003e A positive side effect of this is that it is now safe to call\n\u003e base::StackTrace().ToString() in a sandboxed process. The v8\n\u003e configuration can again use the default stacktrace function.\n\u003e\n\u003e Bug: 462160529\n\u003e Change-Id: I9cfc8d035bb53bb65ed0de356491a4a98809db34\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7303072\n\u003e Reviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\n\u003e Commit-Queue: Alex Gough \u003cajgo@chromium.org\u003e\n\u003e Reviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1567106}\n\nBug: 462160529, 40948553\nChange-Id: I5c4f0a8254681376262384a39230da70b10a60a7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7452310\nCommit-Queue: Alex Gough \u003cajgo@chromium.org\u003e\nReviewed-by: Leszek Swirski \u003cleszeks@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nReviewed-by: Kyle Charbonneau \u003ckylechar@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1569340}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 128ded4b9483a395359f36b786ef66b50265fdd3\n" }, { "commit": "ac847388830e372cd042be7e94ad90d0c2858ea2", "tree": "d6672a991b811b6cc75e4aecc73e008dad682247", "parents": [ "00c72cfca8cfa6a8afc058ddf49238a17f864d05" ], "author": { "name": "Victor Hugo Vianna Silva", "email": "victorvianna@google.com", "time": "Tue Jan 06 23:14:41 2026" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Jan 06 23:22:46 2026" }, "message": "Migrate various base::Contains() to contains() in testing\n\nBug: 470391351\nChange-Id: I7c4cb8ffcebe6282c73552ee45952602b4eef8b7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7366888\nReviewed-by: Ben Pastene \u003cbpastene@chromium.org\u003e\nCommit-Queue: Ben Pastene \u003cbpastene@chromium.org\u003e\nAuto-Submit: Victor Vianna \u003cvictorvianna@google.com\u003e\nCr-Commit-Position: refs/heads/main@{#1565302}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 84b8493b9ee0e1eb9380cf0e18a95d7f22265b44\n" }, { "commit": "00c72cfca8cfa6a8afc058ddf49238a17f864d05", "tree": "e76f6b82330271d75203bfe19548094109f79e93", "parents": [ "f1e12a1b5cea1a2aa59192de48e492cfb7b3b6d6" ], "author": { "name": "Antonio Alphonse", "email": "alphonsea@google.com", "time": "Fri Dec 12 09:13:38 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Dec 12 09:21:43 2025" }, "message": "[Fuzzing] Add test for check failure stacktraces.\n\nBug: 40948553\nChange-Id: If5672f7b9baf4cc76919fce89f3f27a59cc6c289\nCq-Include-Trybots: luci.chromium.try:chromeos-x64-libfuzzer-asan-rel-tests,linux-x64-centipede-asan-rel-tests,linux-x64-libfuzzer-asan-dbg-tests,linux-x64-libfuzzer-asan-rel-tests,linux-x64-libfuzzer-msan-rel-tests,linux-x64-libfuzzer-ubsan-rel-tests,linux-x86-libfuzzer-asan-rel-tests,mac-arm64-libfuzzer-asan-rel-tests,win-x64-libfuzzer-asan-rel-tests\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/5904310\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1557915}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 0328bbebd7b52a70c15cca551bd7f1904818d1f3\n" }, { "commit": "f1e12a1b5cea1a2aa59192de48e492cfb7b3b6d6", "tree": "0d3752d9b819925dab038ecaf3832c358471afe6", "parents": [ "874cc741183ceabf107175369a92dd763d948f10" ], "author": { "name": "Titouan Rigoudy", "email": "titouan@google.com", "time": "Wed Dec 03 07:34:39 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Wed Dec 03 07:55:20 2025" }, "message": "[Chrome Fuzzing] Document where to find sanitizer suppressions.\n\nFixed: 448207018\nChange-Id: I894a4b2a023fc33fbf708930eab786646a6a6964\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7204398\nAuto-Submit: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Fergal Daly \u003cfergal@chromium.org\u003e\nCommit-Queue: Fergal Daly \u003cfergal@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1553264}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e7f5fa9dc121b4c668bc034d955764a4b93571ee\n" }, { "commit": "874cc741183ceabf107175369a92dd763d948f10", "tree": "816bfbc622289b7d167c8b05c0936298bf074a58", "parents": [ "88b38180c18fd58c2678ec0520b44c9bff590a64" ], "author": { "name": "Björn Terelius", "email": "terelius@chromium.org", "time": "Fri Nov 14 09:20:28 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Nov 14 09:25:20 2025" }, "message": "Revert \"fix of auto spanification for libfuzzer\"\n\nThis reverts commit cdd3e5c2638fc268ced4d11334133cc85e108b48.\n\nReason for revert: Adding a //base dependency in //testing breaks downstream projects (that can\u0027t use //base)\n\nOriginal change\u0027s description:\n\u003e fix of auto spanification for libfuzzer\n\u003e\n\u003e spanification: automatically spanify testing/libfuzzer/unittest_main.cc\n\u003e etc.\n\u003e\n\u003e This is the result of running the automatic spanification on linux and\n\u003e updating code to use and pass spans where size is known.\n\u003e\n\u003e The original patch was fully automated using script:\n\u003e //tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\n\u003e Then refined with gemini-cli\n\u003e\n\u003e gemini-run/batch-run-1761116551/group_104\n\u003e\n\u003e BUG\u003d439964610\n\u003e\n\u003e Change-Id: I30ba2b835150041d2e8ce36eb3ef5a18d41a84d7\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7138958\n\u003e Reviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\n\u003e Auto-Submit: Daniel Angulo \u003cangdaniel@google.com\u003e\n\u003e Commit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\n\u003e Reviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1544501}\n\nBug: 439964610\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I5f39b7a046a0e00d5e351460e659d764d438dddf\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7156575\nCommit-Queue: Jeremy Leconte \u003cjleconte@google.com\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1544806}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: b54a82bfa3d0b4766d5bf0a52de93838c268ada3\n" }, { "commit": "88b38180c18fd58c2678ec0520b44c9bff590a64", "tree": "13b8e359d131acb702ffc917aea12ccaceeb2904", "parents": [ "c561b4dbad651c63e63a6f7015605ef67743c360" ], "author": { "name": "Daniel Angulo", "email": "angdaniel@google.com", "time": "Thu Nov 13 21:05:35 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Nov 13 21:25:16 2025" }, "message": "fix of auto spanification for libfuzzer\n\nspanification: automatically spanify testing/libfuzzer/unittest_main.cc\netc.\n\nThis is the result of running the automatic spanification on linux and\nupdating code to use and pass spans where size is known.\n\nThe original patch was fully automated using script:\n//tools/clang/spanify/rewrite-multiple-platforms.sh -platforms\u003dlinux\nThen refined with gemini-cli\n\ngemini-run/batch-run-1761116551/group_104\n\nBUG\u003d439964610\n\nChange-Id: I30ba2b835150041d2e8ce36eb3ef5a18d41a84d7\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7138958\nReviewed-by: Stephen Nusko \u003cnuskos@chromium.org\u003e\nAuto-Submit: Daniel Angulo \u003cangdaniel@google.com\u003e\nCommit-Queue: Daniel Angulo \u003cangdaniel@google.com\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1544501}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: cdd3e5c2638fc268ced4d11334133cc85e108b48\n" }, { "commit": "c561b4dbad651c63e63a6f7015605ef67743c360", "tree": "816bfbc622289b7d167c8b05c0936298bf074a58", "parents": [ "7446275606dd9230e854b898d9c6a5e76bd42729" ], "author": { "name": "Florin Malita", "email": "fmalita@chromium.org", "time": "Mon Nov 03 17:29:05 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Nov 03 17:32:21 2025" }, "message": "[pathbuilder] Enforce immutable SkPath APIs globally\n\nPath-editing methods in Skia\u0027s SkPath are being deprecated. This is the\nfinal step in migrating Chromium to SkPathBuilder.\n\nTurn on SK_HIDE_PATH_EDIT_METHODS to enforce non-editing SkPath APIs.\n\nRefactor remaining call sites (that were missed in previous cleanup CLs)\nto use SkPathBuilder or named factories.\n\nNo functional changes.\n\nBug: 378688986\nChange-Id: Ib088b78a7ac798fe83004252694d7c3a867531f2\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7101838\nReviewed-by: Mike Reed \u003cmike@reedtribe.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nReviewed-by: Dana Fried \u003cdfried@chromium.org\u003e\nReviewed-by: Toni Barzic \u003ctbarzic@google.com\u003e\nReviewed-by: Mitsuru Oshima \u003coshima@chromium.org\u003e\nReviewed-by: Thomas Anderson \u003cthomasanderson@chromium.org\u003e\nReviewed-by: Ted Choc \u003ctedchoc@chromium.org\u003e\nCommit-Queue: Florin Malita \u003cfmalita@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1539408}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 63267f2f424009cfa9a3f5e05877b9c2a0647ede\n" }, { "commit": "7446275606dd9230e854b898d9c6a5e76bd42729", "tree": "f6e33a09757ad5d3327c737169580d6a32348b7f", "parents": [ "861f134aa3e4fba6e60649d75cdb4e30475f45e6" ], "author": { "name": "Florin Malita", "email": "fmalita@chromium.org", "time": "Thu Oct 23 16:28:18 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 23 16:31:11 2025" }, "message": "Use span-based Skia APIs\n\nThe old style rawptr + size entry points are being deprecated.\n\nUpdate call sites to equivalent SkSpan-based APIs, and drop the\nSK_SUPPORT_UNSPANNED_APIS Skia define.\n\nChange-Id: I4622a65d98387a7cd95ace7a7a854621a20eec5a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7067794\nReviewed-by: Mike Reed \u003cmike@reedtribe.org\u003e\nReviewed-by: Etienne Bergeron \u003cetienneb@chromium.org\u003e\nReviewed-by: Keren Zhu \u003ckerenzhu@chromium.org\u003e\nReviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Florin Malita \u003cfmalita@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1534394}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 903f5f0fca6581a85bbdc09a1e9df860398971e0\n" }, { "commit": "861f134aa3e4fba6e60649d75cdb4e30475f45e6", "tree": "ae2b1594d82e5503d2daedfacc31250d803894de", "parents": [ "0ff073c356cd516c0208c1b4e342b3531bdc7501" ], "author": { "name": "Giovanni Ortuño Urquidi", "email": "ortuno@chromium.org", "time": "Tue Oct 21 09:48:54 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Oct 21 09:51:29 2025" }, "message": "mojo: Fix leak in TemplateUrlParserFuzzer\n\nCalling TemplateURLParser::Parse() creates a Remote which is destroyed\nwhen the callback runs. Shutting down in the middle of this causes\nlow-level classes like ipcz::TrapSet::Trap to be leaked.\n\nWait for Mojo to finish cleaning up to avoid leaks.\n\nFixed: 350325617\nChange-Id: I70d853f733d58210d8b7cdcdda4c4bc301070804\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7062852\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nAuto-Submit: Giovanni Ortuno Urquidi \u003cortuno@chromium.org\u003e\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nReviewed-by: Alex Gough \u003cajgo@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1532831}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 3beec89228fb24bb8e18ece50e2b52a748ea485e\n" }, { "commit": "0ff073c356cd516c0208c1b4e342b3531bdc7501", "tree": "f3a395d39d9b15dcc6064a529234e9be9bb5e1d4", "parents": [ "8a15fcea556aa248aa23e721f59d28a7e388268c" ], "author": { "name": "Lei Zhang", "email": "thestig@chromium.org", "time": "Thu Oct 16 09:34:27 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Oct 16 09:37:03 2025" }, "message": "Remove unnecessary //build/config/features.gni imports\n\nThis .gni file only defines a few GN variables. Files that don\u0027t use\nthose variables don\u0027t need to import this .gni file.\n\nChange-Id: I06e1e20e348cf7d29238c80430a3139b72b3fc9a\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7047261\nCommit-Queue: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nOwners-Override: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nAuto-Submit: Lei Zhang \u003cthestig@chromium.org\u003e\nReviewed-by: Sylvain Defresne \u003csdefresne@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1530708}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d885eb6bd1991e0b2901dcae97ea53c6cd8f78f8\n" }, { "commit": "8a15fcea556aa248aa23e721f59d28a7e388268c", "tree": "883070592ed7faf63035ed6c9b6c11bda32ec0f5", "parents": [ "e3ad27906ae7beba2965212b721c054f9a6c3835" ], "author": { "name": "Lukasz Anforowicz", "email": "lukasza@chromium.org", "time": "Tue Sep 30 14:08:03 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 30 14:10:37 2025" }, "message": "[rust png] Reland: Reinforce `testonly`-ness of some users of `libpng`.\n\nThis reverts commit 7fa4c2d7ab42a48247ce8e0290cbb7e854990f1e and\neffectively relands https://crrev.com/c/6976870. The reland is\nattempted after using wildcards to cover extra gni-generated targets.\n`Cq-Include-Trybots` directives in the CL description should verify\ncorrectness of the reland. Original CL description follows:\n\nThis CL extracts a separate `third_party/libpng:libpng_for_testonly`\ntarget which:\n\n1) Is a `group` that proxies/forwards to the `libpng` target by listing\n it as its `public_deps`\n2) Has limited visibility (based on the new `libpng_testonly_visibility`\n introduced in the refactored `third_party/libpng/visibility.gni`).\n The new visibility is almost unchanged, except for explicitly\n spelling out some targets instead of using wildcards\n3) Is marked as `testonly`\n\nBug: 443128323\nChange-Id: If7ba0d184324a5c662aaf2d52122994ea778d452\nCq-Include-Trybots: luci.chromium.try:ios-catalyst\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6991491\nAuto-Submit: Łukasz Anforowicz \u003clukasza@chromium.org\u003e\nCommit-Queue: Łukasz Anforowicz \u003clukasza@chromium.org\u003e\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1522830}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 4f7637304eca894adf2e70078a55654a88224a30\n" }, { "commit": "e3ad27906ae7beba2965212b721c054f9a6c3835", "tree": "2ac2718e437018fe88a2a6202932aa3e4d0abd84", "parents": [ "e42024aabdf9c287cd06f73134983fa22928d3ca" ], "author": { "name": "Yi Gu", "email": "yigu@chromium.org", "time": "Fri Sep 26 21:07:20 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 26 21:10:38 2025" }, "message": "Revert \"[rust png] Reinforce `testonly`-ness of some users of `libpng`.\"\n\nThis reverts commit e800913378944238d93efb337e76afb44af08dfd.\n\nReason for revert: Causing some bots failure: https://ci.chromium.org/ui/p/chromium/builders/ci/Libfuzzer%20Upload%20iOS%20Catalyst%20Debug/116009/overview\nOr https://ci.chromium.org/ui/p/chromium/builders/ci/ios-catalyst/201046/overview\n\nOriginal change\u0027s description:\n\u003e [rust png] Reinforce `testonly`-ness of some users of `libpng`.\n\u003e\n\u003e This CL extracts a separate `third_party/libpng:libpng_for_testonly`\n\u003e target which:\n\u003e\n\u003e 1) Is a `group` that proxies/forwards to the `libpng` target by listing\n\u003e it as its `public_deps`\n\u003e 2) Has limited visibility (based on the new `libpng_testonly_visibility`\n\u003e introduced in the refactored `third_party/libpng/visibility.gni`).\n\u003e The new visibility is almost unchanged, except for explicitly\n\u003e spelling out some targets instead of using wildcards\n\u003e 3) Is marked as `testonly`\n\u003e\n\u003e Bug: 443128323\n\u003e Change-Id: I15626f7ece79304f9649057e7e215c3e72d15b92\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6976870\n\u003e Reviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\n\u003e Commit-Queue: Łukasz Anforowicz \u003clukasza@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1521521}\n\nBug: 443128323\nNo-Presubmit: true\nNo-Tree-Checks: true\nNo-Try: true\nChange-Id: I106b084528894950a44f52ce7e84c002c54a007e\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6990712\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nOwners-Override: Yi Gu \u003cyigu@chromium.org\u003e\nCommit-Queue: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nAuto-Submit: Yi Gu \u003cyigu@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1521554}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 7fa4c2d7ab42a48247ce8e0290cbb7e854990f1e\n" }, { "commit": "e42024aabdf9c287cd06f73134983fa22928d3ca", "tree": "883070592ed7faf63035ed6c9b6c11bda32ec0f5", "parents": [ "d2d08152d606946668ea513011cd0ac85515273f" ], "author": { "name": "Lukasz Anforowicz", "email": "lukasza@chromium.org", "time": "Fri Sep 26 20:34:01 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 26 20:37:11 2025" }, "message": "[rust png] Reinforce `testonly`-ness of some users of `libpng`.\n\nThis CL extracts a separate `third_party/libpng:libpng_for_testonly`\ntarget which:\n\n1) Is a `group` that proxies/forwards to the `libpng` target by listing\n it as its `public_deps`\n2) Has limited visibility (based on the new `libpng_testonly_visibility`\n introduced in the refactored `third_party/libpng/visibility.gni`).\n The new visibility is almost unchanged, except for explicitly\n spelling out some targets instead of using wildcards\n3) Is marked as `testonly`\n\nBug: 443128323\nChange-Id: I15626f7ece79304f9649057e7e215c3e72d15b92\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6976870\nReviewed-by: Nico Weber \u003cthakis@chromium.org\u003e\nCommit-Queue: Łukasz Anforowicz \u003clukasza@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1521521}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e800913378944238d93efb337e76afb44af08dfd\n" }, { "commit": "d2d08152d606946668ea513011cd0ac85515273f", "tree": "2ac2718e437018fe88a2a6202932aa3e4d0abd84", "parents": [ "2877b904bc1afd3a7a81b25dd7e5c2b2fb59bf9d" ], "author": { "name": "Titouan Rigoudy", "email": "titouan@chromium.org", "time": "Fri Sep 26 14:20:18 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Fri Sep 26 14:22:46 2025" }, "message": "[Fuzzing] Fix fuzzer smoke tests under centipede.\n\nAbstract away how to run a fuzz target into a utility class that tests\ncan then use, regardless of the fuzzing engine being built for.\n\nBug: 432407787\nChange-Id: If6f908477a8b9c800d423957ed7991dc88724ae7\nCq-Include-Trybots: luci.chromium.try:chromeos-x64-libfuzzer-asan-rel-tests,linux-x64-libfuzzer-asan-dbg-tests,linux-x64-libfuzzer-asan-rel-tests,linux-x64-libfuzzer-msan-rel-tests,linux-x64-libfuzzer-ubsan-rel-tests,linux-x86-libfuzzer-asan-rel-tests,mac-arm64-libfuzzer-asan-rel-tests,win-x64-libfuzzer-asan-rel-tests,linux-x64-centipede-asan-rel-tests\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6967736\nAuto-Submit: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1521267}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 261bf5a15d044ffe7075dbabe014d06c6d47a61d\n" }, { "commit": "2877b904bc1afd3a7a81b25dd7e5c2b2fb59bf9d", "tree": "5fdfa6f114c74cbbb2f20aa659b76b61775b8f57", "parents": [ "135b6804ed38f788e17be690b65a8aa799896407" ], "author": { "name": "Titouan Rigoudy", "email": "titouan@chromium.org", "time": "Thu Sep 18 15:11:21 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 18 15:18:27 2025" }, "message": "[Fuzzing] Basic smoke tests for fuzzers.\n\nBug: 432407787\nChange-Id: Iad585442272849211fdcdc4c55f34d9098976dbf\nCq-Include-Trybots: luci.chromium.try:chromeos-x64-libfuzzer-asan-rel-tests,linux-x64-libfuzzer-asan-dbg-tests,linux-x64-libfuzzer-asan-rel-tests,linux-x64-libfuzzer-msan-rel-tests,linux-x64-libfuzzer-ubsan-rel-tests,linux-x86-libfuzzer-asan-rel-tests,mac-arm64-libfuzzer-asan-rel-tests,win-x64-libfuzzer-asan-rel-tests\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6877529\nAuto-Submit: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nReviewed-by: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCommit-Queue: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1517305}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d6b92bca5341cfeb113da8b2a598048f0c55e3af\n" }, { "commit": "135b6804ed38f788e17be690b65a8aa799896407", "tree": "1002caef29ae466b6f9081f60800409ff5ddaf44", "parents": [ "b5a6f2ebef923fe4979e7693018c30ebec0d65db" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Tue Sep 16 13:37:53 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Tue Sep 16 13:41:10 2025" }, "message": "Revert \"Re-enable chrome_tint_wgsl_fuzzer in libfuzzer builds\"\n\nThis reverts commit d53097ecaeddf63629b779e952769b713a04e047.\n\nReason for revert: The underlying issue with the fuzztest\ncompatibility layer is still there and needs more investigation.\n\nOriginal change\u0027s description:\n\u003e Re-enable chrome_tint_wgsl_fuzzer in libfuzzer builds\n\u003e\n\u003e The issue should now be fixed on the fuzztest compatibility layer with\n\u003e libfuzzer.\n\u003e\n\u003e Bug: 406454922\n\u003e Change-Id: I8134a36bd103fe0106594ff4a368d8fa28020924\n\u003e Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6939712\n\u003e Reviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\n\u003e Commit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\n\u003e Cr-Commit-Position: refs/heads/main@{#1515408}\n\nBug: 406454922\nChange-Id: I7118cda8bf21fda324dc67639a62872a14b0c5c9\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6954525\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nBot-Commit: Rubber Stamper \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nCr-Commit-Position: refs/heads/main@{#1515998}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 34c9ddbf35167610bf256a765c17191242950c58\n" }, { "commit": "b5a6f2ebef923fe4979e7693018c30ebec0d65db", "tree": "d065b795300c5ad9a84be423f405d581958d930b", "parents": [ "4134e0107fdb34aebcec8289447128d7cc0c1220" ], "author": { "name": "Ali Hijazi", "email": "ahijazi@chromium.org", "time": "Mon Sep 15 10:20:22 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Mon Sep 15 10:27:05 2025" }, "message": "Re-enable chrome_tint_wgsl_fuzzer in libfuzzer builds\n\nThe issue should now be fixed on the fuzztest compatibility layer with\nlibfuzzer.\n\nBug: 406454922\nChange-Id: I8134a36bd103fe0106594ff4a368d8fa28020924\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6939712\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Ali Hijazi \u003cahijazi@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1515408}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: d53097ecaeddf63629b779e952769b713a04e047\n" }, { "commit": "4134e0107fdb34aebcec8289447128d7cc0c1220", "tree": "1002caef29ae466b6f9081f60800409ff5ddaf44", "parents": [ "e924da4e07b6c366d9076dda7d0ba23f04f2b38f" ], "author": { "name": "Owners Cleanup", "email": "swarming-tasks@owners-cleanup-prod.google.com.iam.gserviceaccount.com", "time": "Thu Sep 11 08:51:44 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Sep 11 09:04:19 2025" }, "message": "[owners] Remove paulsemel@chromium.org from testing/libfuzzer/OWNERS\n\nThis suggested change is automatically generated based on group\nmemberships and affiliations.\n\nPlease approve this change and vote the highest CR. This will keep the\nOWNERS file tidy. We ask that you do not ignore this change and either\napprove it if the OWNER is no longer active or deny it if the OWNER is\ncontinuing to review CLs (including under a different affiliation).\nThis CL can always be reverted if the understanding changes.\n\nIf this change is in error, vote the lowest CR value (i.e. reject the\nCL) and the bot will abandon it.\n\nSee the owner\u0027s recent review activity for context:\nhttps://chromium-review.googlesource.com/q/paulsemel@chromium.org\n\nTo report an issue, file a bug in the Infra\u003eCodereview component.\n\nChange-Id: I10a48ebcc1e24e7fdf38dd92e85256af069f4ae0\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6931470\nReviewed-by: Pâris Meuleman \u003cpmeuleman@chromium.org\u003e\nAuto-Submit: Owners Cleanup \u003cswarming-tasks@owners-cleanup-prod.google.com.iam.gserviceaccount.com\u003e\nCommit-Queue: Pâris Meuleman \u003cpmeuleman@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1514159}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: 35999cd3f9993465987de08a1f0f14136660e5f0\n" }, { "commit": "e924da4e07b6c366d9076dda7d0ba23f04f2b38f", "tree": "96bb9675a903b54212183084df03fc54ac56ed2f", "parents": [ "5f9ba1c8c0c6b6cc341afc10f670e4653107f3b6" ], "author": { "name": "Michael Achenbach", "email": "machenbach@chromium.org", "time": "Thu Aug 28 08:56:29 2025" }, "committer": { "name": "Copybara-Service", "email": "copybara-worker@google.com", "time": "Thu Aug 28 08:58:48 2025" }, "message": "[test][fuzzilli] Add owners for the Chromium-Fuzzilli integration\n\nThis is solely used in Fuzzilli infrastructure. Adding Fuzzilli owner\nand actual authors as owners to enable faster profile updates in the\nfuture.\n\nChange-Id: I447c823e740ce716d76a6fa80f050eb48f10968d\nReviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/6894434\nReviewed-by: Titouan Rigoudy \u003ctitouan@chromium.org\u003e\nCommit-Queue: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nAuto-Submit: Michael Achenbach \u003cmachenbach@chromium.org\u003e\nCr-Commit-Position: refs/heads/main@{#1507594}\nNOKEYCHECK\u003dTrue\nGitOrigin-RevId: e90a7670954038444b308eadeaff1b4189679da6\n" } ], "next": "5f9ba1c8c0c6b6cc341afc10f670e4653107f3b6" }