From 646df9fb4ea8d01b62ad8c8e8a992612f595e43a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michael=20Br=C3=BCning?= Date: Wed, 28 Oct 2020 14:01:50 +0100 Subject: Update Chromium Pulls in the changes 95bf758e9e5 [Backport] CVE-2020-15968: Use after free in Blink 0f55630c2f4 [Backport] CVE-2020-15969: Use after free in WebRTC. 5a8e372fc7e [Backport] CVE-2020-6561: Inappropriate implementation in Content Security Policy 4e06eb9f1cc Fix bison 3.7 1357b9be19f [Backport] CVE-2020-15999: Heap buffer overflow in freetype 1456539bd05 [Backport] CVE-2020-16003: Use after free in printing. 6475589b7ed [Backport] CVE-2020-16001: Use after free in media. 92253f4cc04 [Backport] CVE-2020-16002: Use after free in PDFium. 5df1bd044c6 [Backport] CVE-2020-15979: Inappropriate implementation in V8 7138ac3ddcf [Backport] CVE-2020-15978 Insufficient data validation in navigation 5ede8738ccb [Backport] CVE-2020-15992 Insufficient policy enforcement in networking a8f95043550 [Backport] CVE-2020-15987: Use after free in WebRTC (1/2) e5adc243d57 [Backport] CVE-2020-15987: Use after free in WebRTC (2/2) 6411f535efd Fix potential leak after fix for CVE-2020-15987 e5c6b3de888 [Backport] CVE-2020-15989: Uninitialized Use in PDFium 811208e7b60 [Backport] Security bug 1125199 42a1a175af1 [Backport] CVE-2020-16008: Stack buffer overflow in WebRTC aef97e76545 [Backport] CVE-2020-16011: Heap buffer overflow in UI on Windows. ade0aef290c [Backport] Security bug 1137608 8e776e6e6f5 [Backport] CVE-2020-16014: Use after free in PPAPI 765a0ff57eb [Backport] CVE-2020-16022: Insufficient policy enforcement in networking 117abfcce74 [Backport] Dependency for CVE-2020-16024 05386001f90 [Backport] CVE-2020-16024: Heap buffer overflow in UI 275dca60b70 [Backport] CVE-2020-16028: Heap buffer overflow in WebRTC 053316ce37e [Backport] Security bug 1137603 cef4d6d73cd [Backport] Security bug 1142020 026b0132f6d Fix CVE-2020-16034 by disabling chrome://webrtc-internals 878d0697c48 [Backport] mac: make find_sdk.py work when the sdk goes to 11 4689c3d74c5 [Backport] CVE-2020-16040: Insufficient data validation in V8 a0c71808baf [Backport] CVE-2020-16016: Inappropriate implementation in base. 10cb7cc9b11 [Backport] Security bug 1123035 0fdd19c558e [Backport] CVE-2020-16027: Insufficient policy enforcement in developer tools. 2b0be93dc42 [Backport] Dependency for CVE-2020-16030 c1cc6046fbc [Backport] CVE-2020-16030: Insufficient data validation in Blink 72f67be024a [Backport] CVE-2020-16042: Uninitialized Use in V8 Updates test expectations for loading chrome://webrtc-internals in tst_qwebengineview. Fixes: QTBUG-87787 Task-number: QTBUG-89191 Change-Id: I7e04b3f225affa9912dce1b1dd13f0dc8dba754b Reviewed-by: Michal Klocek --- src/3rdparty | 2 +- tests/auto/widgets/qwebengineview/tst_qwebengineview.cpp | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/src/3rdparty b/src/3rdparty index d6e068414..72f67be02 160000 --- a/src/3rdparty +++ b/src/3rdparty @@ -1 +1 @@ -Subproject commit d6e06841443a40c99efd209bce6c96c8a7659c34 +Subproject commit 72f67be024afbbeadab26e9c3f3f848827c85e18 diff --git a/tests/auto/widgets/qwebengineview/tst_qwebengineview.cpp b/tests/auto/widgets/qwebengineview/tst_qwebengineview.cpp index b9337cbee..f579506bf 100644 --- a/tests/auto/widgets/qwebengineview/tst_qwebengineview.cpp +++ b/tests/auto/widgets/qwebengineview/tst_qwebengineview.cpp @@ -3075,7 +3075,7 @@ void tst_QWebEngineView::webUIURLs_data() QTest::newRow("usb-internals") << QUrl("chrome://usb-internals") << false; QTest::newRow("user-actions") << QUrl("chrome://user-actions") << false; QTest::newRow("version") << QUrl("chrome://version") << false; - QTest::newRow("webrtc-internals") << QUrl("chrome://webrtc-internals") << true; + QTest::newRow("webrtc-internals") << QUrl("chrome://webrtc-internals") << false; QTest::newRow("webrtc-logs") << QUrl("chrome://webrtc-logs") << false; } -- cgit v1.2.3