[qt/qt/qtwebengine-chromium]: Summary of bulk changes made

Git repository change summary for qt/qt/qtwebengine-chromium
Pushed by mirror-service into branch '140-based'.
Changed from db6d81bdf7f8b48c12bcb0c38bbc6e326643c6d3 to 678267c7edc0788a6b0065ac344557838a0fbfb4
Acknowledgement was received that this change introduces only existing code that has been pushed to another public open source repository.

This change contains the following new commits:

Git commit 0943a548e3da1e44b6e198b028b2cba6e59d7476 by Moss Heim on 05/08/2026 at 08:36..
[fixup] Fix QtWebEngine build on all platforms

This target change for GCC was intended to only apply to the FP op
functions. It's not necessary for exec_stages and just creates a target
mismatch when GCC attempts to inline that function inside run_program
below.

Fixes

```
In file included from ../../../../../sources/qtwebengine-6.11.0/src/3rdparty/chromium/third_party/skia/modules/skcms/src/skcms_TransformBaseline.cc:47:
../../../../../sources/qtwebengine-6.11.0/src/3rdparty/chromium/third_party/skia/modules/skcms/src/Transform_inl.h: In function 'void skcms_private::baseline::run_program(const skcms_private::Op*, const void**, ptrdiff_t, const char*, char*, int, size_t, size_t)':
../../../../../sources/qtwebengine-6.11.0/src/3rdparty/chromium/third_party/skia/modules/skcms/src/Transform_inl.h:1503:13: error: inlining failed in call to 'always_inline' 'void skcms_private::baseline::exec_stages(void (**)(StageList, const void**, const char*, char*, F, F, F, F, int), const void**, const char*, char*, int)': target specific option mismatch
 1503 |     SI void exec_stages(StageFn* stages, const void** contexts, const char* src, char* dst, int i) {
      |             ^~~~~~~~~~~
../../../../../sources/qtwebengine-6.11.0/src/3rdparty/chromium/third_party/skia/modules/skcms/src/Transform_inl.h:1556:20: note: called from here
 1556 |         exec_stages(stages, contexts, src, dst, i);
      |         ~~~~~~~~~~~^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
```

Task-number: QTBUG-144285
Change-Id: I0d039127be63037ccf93e8763ee354fef1eb9f41
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/757293
Reviewed-by: Michal Klocek <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine-chromium/-/commit/0943a548e3da1e44b6e198b028b2cba6e59d7476

Git commit 92785baaa654d7ec902629d8ee4268457ceb4923 by Moss Heim (on behalf of Sunny Sachanandani) on 05/08/2026 at 09:56..
[Backport] CVE-2026-13875: Insufficient validation of untrusted input in GPU

Cherry-pick of patch originally reviewed on
https://chromium-review.googlesource.com/c/chromium/src/+/7823350:
[gpu] Fix GPU synchronization bypass in D3DImageBacking

GetPendingWaitFences returned an empty list of fences if one of the
internal waits failed (e.g., due to an invalid injected fence).
Callers interpreted this as no synchronization being required, leading
to potential data races and information leaks.

This CL changes GetPendingWaitFences to return std::optional and
returns std::nullopt on failure. Callers are updated to fail the
access if GetPendingWaitFences returns std::nullopt.

It also refactors the lazy initialization of the texture device fence
to only insert it into the map when everything succeeds, avoiding
partial state mutation.

Bug: 498721671
Test: D3DImageBackingFactoryTest.InvalidExternalFence
Link: https://chromium-review.googlesource.com/id/I2d3ff59eaa59d7a29e484056be70b26b6a6a6964
Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7823350
Reviewed-by: Vasiliy Telezhnikov <[email protected]>
Auto-Submit: Sunny Sachanandani <[email protected]>
Commit-Queue: Sunny Sachanandani <[email protected]>
Cr-Commit-Position: refs/heads/main@{#1631525}
Task-number: QTBUG-147892
Change-Id: Ic4c441acc25e03bb27caee51227f045afccf3e99
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/753341
Reviewed-by: Allan Sandfeld Jensen <[email protected]>
Reviewed-by: Michal Klocek <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine-chromium/-/commit/92785baaa654d7ec902629d8ee4268457ceb4923

Git commit 678267c7edc0788a6b0065ac344557838a0fbfb4 by Michal Klocek on 05/08/2026 at 10:47..
[fixup][Backport] Dependency for CVE-2026-14407 (1/3)

Deals with:
error C3646: 'attribute': unknown override specifier

Change-Id: I3bd29cfe816e2c76e6f9e3a4a59dd8c0c540d12e
Reviewed-on: https://codereview.qt-project.org/c/qt/qtwebengine-chromium/+/757973
Reviewed-by: Michael Brüning <[email protected]>
https://invent.kde.org/qt/qt/qtwebengine-chromium/-/commit/678267c7edc0788a6b0065ac344557838a0fbfb4