Graphics AiChengGongENGINEERING SIGNALS

GLOBAL GRAPHICS RADAR

技术动态

每两小时从官方 RSS、Atom、API 与仓库提交中提取信号。二手来源只做发现；能定位一手资料时，链接回到一手。

60SCORE
一手来源OpenHarmony graphic_2d修复openharmony

!31723 merge shadowbatching into master ↗

摘要待补：fix(render_service_base): fix ShadowBatching redundant drawing in ShadowPass Created-by: songmengxiang_ Commit-by: songmengxiang Merged-by: openharmony_ci Description: **Description:** **Issue number:** https://gitcode.com/openharmony/graphic_graphic_2d/issues/25287 **Test & Result:** **CodeCheck:** <table> <thead> <tr> <th>类型</th> <th>自检项</th> <th>自检结果</th> </tr> </thead> <tbody> <tr> <td rowspan="2"><strong>多线程</strong></td> <td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td> <td>自检结果：pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td> <td>自检结果：pass</td> </tr> <tr> <td rowspan="4"><strong>内存操作</strong></td> <td>调用外部接口时，确认是否对返回值做了判空判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td> <td>自检结果：pass</td> </tr> <tr> <td>内存操作优先使用安全函数，并检查其返回值</td> <td>自检结果：pass</td> </tr> <tr> <td>注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td> <td>自检结果：pass</td> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td> <td>自检结果：pass</td> </tr> <tr> <td rowspan="3"><strong>外部输入</strong></td> <td>所

查看原文 →
79SCORE
一手来源Skia发布android / gpu-drivers

Roll ANGLE from 272d37f4cc0c to 91d2d125ec00 (9 revisions) ↗

摘要待补：https://chromium.googlesource.com/angle/angle.git/+log/272d37f4cc0c..91d2d125ec00 2026-08-03 wangra@google.com Vulkan: Map only remaining buffer size in getIndexRange 2026-08-03 wangra@google.com Optimize robust init check during GenerateMipmap 2026-08-03 geofflang@chromium.org GL: Use PixelPack/Unpack structs in ContextStateGL 2026-08-03 syoussefi@chromium.org Vulkan: Remove TextureVk::getImageViews() 2026-08-03 ted.lin0000@gmail.com Tests: Fix dEQP build and runtime for Wayland-only configs 2026-08-03 angle-autoroll@skia-public.iam.gserviceaccount.com Roll vulkan-deps from 9b3fec1aec6c to af17ae0ac3a5 (8 revisions) 2026-08-03 yanwen.xu@samsung.com OpenCL: add additional validation to GetProgramInfo 2026-08-03 angle-autoroll@skia-public.iam.gserviceaccount.com Roll VK-GL-CTS from 3b7cbad78e93 to 34b25839e80b (23 revisions) 2026-08-03 angle-autoroll@skia-public.iam.gserviceaccount.com Roll Chromium from cbb915d67c46 to 9ac349c94b98 (845 revisions) If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/angle-skia-autoroll Please CC alexisdavidc@google.com,jmadill@google.com on the revert to ensure that a human is

查看原文 →
71SCORE
一手来源ANGLE修复android / vulkan-opengl

Translator: Fix index-checks vs comma ↗

摘要待补：In `expression[index]`, when checking if certain limitations apply to the `expression` and `index`, skip all comma operator left-hand sides in `expression` before checking the qualifier. If for example `gl_SomeBuiltIn[index]` has a restriction, so does `(x, gl_SomeBuiltIn)[index]`. Bug: chromium:540019091 Change-Id: Ib01937521eba275220f7e157686606cda53331f2 Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8178173 Reviewed-by: Yuxin Hu <yuxinhu@google.com> Commit-Queue: Shahbaz Youssefi <syoussefi@chromium.org>

查看原文 →
60SCORE
一手来源OpenHarmony window_manager功能openharmony

!19914 merge develop_addisinuse into master ↗

摘要待补：add isinuse Created-by: AZ22 Commit-by: wangdi Merged-by: openharmony_ci Description: **Description:** add isinuse **Issue number:** https://gitcode.com/openharmony/window_window_manager/issues/15344 **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：Pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：Pass</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：Pass</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：Pass</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：Pass</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：Pass</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：Pass</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：Pass</td> </tr> <tr>

查看原文 →
79SCORE
一手来源Skia发布android / gpu-drivers

Roll vulkan-deps from af17ae0ac3a5 to fd9ab9744d0b (9 revisions) ↗

摘要待补：https://chromium.googlesource.com/vulkan-deps.git/+log/af17ae0ac3a5..fd9ab9744d0b Also rolling transitive DEPS: https://skia.googlesource.com/external/github.com/KhronosGroup/SPIRV-Tools/+log/a9cdf5bdd25d516294b5c25502b67e6116ed7eb5..d993bcfafa3c6dd9c0ba0560ae1456a62fd78e07 https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Utility-Libraries/+log/ca91449653e1a29b4b3c1876d7f6e1dcda08cfdd..bf60ee138ced6a8cf9bc3d3f05e32c6a99c2e778 If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/vulkan-deps-skia-autoroll Please CC alexisdavidc@google.com,skiabot@google.com on the revert to ensure that a human is aware of the problem. To file a bug in skia: https://bugs.chromium.org/p/skia/issues/entry To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md Cq-Include-Trybots: skia/skia.primary:Build-Ubuntu24.04-Clang-x86_64-Release-ANGLE;skia/skia.primary:Test-Win11-Clang-Golo-GPU-QuadroP400-x86_64-Debug-All

查看原文 →
72SCORE
一手来源Skia驱动android / gpu-drivers

[text] Introduce PackedGPUGlyphID to add more metadata to SkPackedGlyphID ↗

摘要待补：Both Ganesh and Graphite share a lot of common structure to their glyph handling code, so the changes outlined below are applied pretty similarly to both codebases. 1. Adds a new shared type PackedGPUGlyphID that wraps SkPackedGlyphID and packs into the free bits the rest of the information that atlas-backed glyphs require, which is the mask format, the amount of padding, and whether or not the data is a coverage or distance value. 2. Pulls back the presence of MaskFormat from the GlyphVector concepts and functions as it's now handled internally by each backend's GlyphData classes and embedded into the packed GPU IDs that they make. 3. Each backend's TextStrike implementation stores PackedGPUGlyphIDs as the keys to GlyphEntries instead of SkPackedGlyphIDs. This ensures that an atlas will only have a cache hit if all of the mask/padding/data-type properties are consistent with what was in the atlas and what is requested by the subrun being drawn. 4. Each backend's GlyphData implementation takes in these additional properties in its constructor (propagating to initBackendData() calls). It then resolves the mask format and padding with the configuration of the backend's atlas mana

查看原文 →
71SCORE
一手来源Skia功能android / gpu-drivers

Update viewer help flags ↗

摘要待补：I noticed the flags (e.g. dawn) for --backend's help message were out of date. The intent was to update this dynamically based on what was compiled in, but this bitrotted. I updated this to match the logic for get_backend_type Change-Id: Ic6d3565b8f644ca87f4fb742b78d264d1a0c8079 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1313016 Commit-Queue: Kaylee Lubick <kjlubick@google.com> Auto-Submit: Kaylee Lubick <kjlubick@google.com> Commit-Queue: Alexis Cruz-Ayala <alexisdavidc@google.com> Reviewed-by: Alexis Cruz-Ayala <alexisdavidc@google.com>

查看原文 →
78SCORE
一手来源ANGLE修复android / vulkan-opengl

Vulkan: Map only remaining buffer size in getIndexRange ↗

摘要待补：Correct the mapped buffer range length in getIndexRange to only map the remaining buffer size. This prevents staging buffer copies from reading past the end of the suballocation. Test: angle_end2end_tests --gtest_filter="*DrawAtOffsetWithClientSideVertexData*" Bug: b/536598187 Change-Id: I6e1bb638562fc165a013478c16da639c1cfd5071 Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8178489 Reviewed-by: Charlie Lao <cclao@google.com> Reviewed-by: Shahbaz Youssefi <syoussefi@chromium.org> Commit-Queue: Ran Wang <wangra@google.com>

查看原文 →
60SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

Twenty years of Pandoc ↗

摘要待补：<p>John MacFarlane has published a <a href="https://pandoc.org/twenty-years-of-pandoc.html">lengthy retrospective</a> to commemorate twenty years of the <a href="https://pandoc.org/">Pandoc</a> document converter.</p> <blockquote class="bq"> <p>On August 3, 2006, I uploaded the first version of pandoc to my website, releasing it under the free GPL license. Pandoc 0.1 consisted of about 3000 lines of Haskell code, with no dependencies aside from GHC's standard library. It could convert Markdown, reStructuredText, HTML, and LaTeX documents into any of these formats, plus RTF or S5. I had no idea at the time that this would just be the first of over two hundred releases over the next twenty years; that the project would become the <a href="https://github.com/EvanLi/Github-Ranking/blob/master/Top100/Haskell.md">most popular program written in Haskell</a>; that I would spend countless hours on bug-fixes, improvement, and project management; that I would collaborate with programmers in many other countries; that pandoc would come to support over fifty document formats; that it would allow automatic generation of citations and bibliographies; that it would become integrated into academic

查看原文 →
79SCORE
一手来源OpenXR SDK releases发布xr-openxr

OpenXR SDK 1.1.62 ↗

摘要待补：<h2>OpenXR SDK 1.1.62 (2026-07-31)</h2> <p>This release includes a new vendor extension, an important fix to several vendor<br> extension added in the previous release, a loader design doc clarification, and<br> some software fixes and cleanup. For extension authors, there are workflow<br> improvements: extensions may now be developed in their own "fragment" XML file<br> and referenced from <code>xr.fragmented.xml</code>. Provided tooling processes this file to<br> generate the all-inclusive <code>xr.xml</code> previously edited directly. This reduces the<br> merge conflicts seen during extension development and makes review easier,<br> without requiring changes to tools expecting the conventional combined XML file.</p> <ul> <li>SDK <ul> <li>Fix: Only include EGL headers in <code>xr_dependencies.h</code> when using EGL or GLES.<br> (<a href="https://gitlab.khronos.org/openxr/openxr/merge_requests/4387" rel="nofollow">internal MR 4387</a>)</li> <li>Improvement: Add <code>src/common/platform_exports.h</code> to de-duplicate platform<br> specific export flags.<br> (<a href="https://gitlab.khronos.org/openxr/openxr/merge_requests/4323" rel="nofollow">internal MR 4323</a>)</li> <li>Impr

查看原文 →
83SCORE
一手来源ANGLE性能android / vulkan-opengl

Optimize robust init check during GenerateMipmap ↗

摘要待补：Add an enum class EnsureInitializedLevels to optionally skip robust initialization for texture levels above the base level during glGenerateMipmap since they will be overwritten. Test: angle_end2end_tests --gtest_filter="MipmapRobustInitTestES3.GenerateMipmapRobustInitOptimization*" Bug: b/532617619 Change-Id: I5bc60b0df7e72839f61a4f8a65c3d2e64825b67f Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8177726 Reviewed-by: Geoff Lang <geofflang@chromium.org> Commit-Queue: Ran Wang <wangra@google.com> Reviewed-by: Shahbaz Youssefi <syoussefi@chromium.org>

查看原文 →
71SCORE
一手来源ANGLE修复android / vulkan-opengl

GL: Use PixelPack/Unpack structs in ContextStateGL ↗

摘要待补：Instead of enumerating the members, store them in the frontend structs. This matches the single dirty bit which represents all of them together. Bug: angleproject:532176406 Change-Id: Ibe8dfbe458e229a8965af3ed11e08771e3801e86 Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8141004 Reviewed-by: Shahbaz Youssefi <syoussefi@chromium.org> Commit-Queue: Geoff Lang <geofflang@chromium.org>

查看原文 →
78SCORE
一手来源ANGLE修复android / vulkan-opengl

Vulkan: Remove TextureVk::getImageViews() ↗

摘要待补：No user of TextureVk needs this helper and internally TextureVk can just use mImageView directly. Bug: chromium:498372331 Change-Id: Ia8bdfd7131bb57db6a62387b6cdd2f1e98a45a41 Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8185855 Reviewed-by: Amirali Abdolrashidi <abdolrashidi@google.com> Commit-Queue: Shahbaz Youssefi <syoussefi@chromium.org>

查看原文 →
97SCORE
一手来源Skia规范android / gpu-drivers

[Graphite] Add explicit root nodes struct ↗

摘要待补：For the implementation of drawMesh, we would like to add another optional root shader node for SkMeshSpecification shaders, however this introduces some ambiguity in the root nodes layout since this would be an optional node coming after the clip shader which is also optional. We could check if the 3rd node shader snippet is a mesh shader, or assume 4 root nodes means all nodes exist; however this seems brittle to be relying on consistent indices of the nodes and checks like this, so instead I made a struct which tracks the root nodes explicitly. This is done by inserting headers with a value < 0 specifying the type of root node to the PaintParamsKey data before every root node which is appended. Then when constructing the ShaderNode tree, root nodes are expected to be preceded by a header which defines the type of root node it is. Bug: b/238758222 Change-Id: Ic8f1fbf3e7cb23ef307d7537a6acbf1739993088 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1300900 Reviewed-by: Michael Ludwig <michaelludwig@google.com> Commit-Queue: Nathan Sanchez <nathanasanchez@google.com>

查看原文 →
90SCORE
一手来源glslang releases发布vulkan-opengl / gpu-drivers

16.5.0 ↗

摘要待补：No content.

查看原文 →
90SCORE
一手来源Vulkan-ValidationLayers releases发布vulkan-opengl

v1.4.358 ↗

摘要待补：<p>build: Update to header v1.4.358</p>

查看原文 →
78SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

C-Kermit 11 released ↗

摘要待补：For those of us with a long memory: John Goerzen has <a href="https://changelog.complete.org/archives/44456-celebrating-45-years-of-kermit-with-the-first-new-c-kermit-release-in-15-years-and-working-with-a-decades-old-c-codebase">announced</a> the release of C-Kermit&#160;11, the first release of this file-transfer utility in 15&#160;years. <p> <blockquote class="bq"> As Debian maintainer of Kermit, I noticed some areas where it wasn't matching modern expectations. One area was, not surprising for a project of its age, security. Another area was that its character set or line-ending conversions are usually not desired now; we are used to byte-identical binary transfers, and the defaults caused confusion and even some rare instances of data corruption. So I started making a few patches last year. </blockquote> <p> See <a href="https://github.com/OpenKermit/ckermit/releases/tag/v11.0.506">the changelog</a> for details on the work that has been done. <p> Most of us probably haven't thought about C-Kermit in years (if ever), but there was a time when it was an essential tool for moving files between machines.

查看原文 →
90SCORE
一手来源glslang releases发布vulkan-opengl / gpu-drivers

main-tot ↗

摘要待补：<p>Continuous build of the latest main branch by Github</p>

查看原文 →
71SCORE
一手来源Skia修复android / gpu-drivers

Avoid integer overflow in SkRasterPipeline ↗

摘要待补：I wasn't able to get this to repro like https://review.skia.org/1253418 (by adding a case in resources/sksl) but I was by adding a manual test. Not quite sure why. Bug: oss-fuzz:416061512 Change-Id: I61275c5c1372c2d49d37a05dcdde32a72dadc0d5 Fixed: 416061512 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1311496 Reviewed-by: Jorge Betancourt <jmbetancourt@google.com> Auto-Submit: Kaylee Lubick <kjlubick@google.com> Commit-Queue: Jorge Betancourt <jmbetancourt@google.com>

查看原文 →
71SCORE
一手来源Skia功能android / gpu-drivers

Add exemption to mutex Presubmit check ↗

摘要待补：Used in SkLogHandler sample implementation in examples Change-Id: Ieb297cb2fe1d5f93a47c2c5e0b50e695d4129544 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1309936 Auto-Submit: Jorge Betancourt <jmbetancourt@google.com> Commit-Queue: Noelle Scobie <nscobie@google.com> Reviewed-by: Noelle Scobie <nscobie@google.com>

查看原文 →
90SCORE
一手来源Skia性能android / gpu-drivers

Optimize VulkanAMDMemoryAllocator::totalAllocatedAndUsedMemory() ↗

摘要待补：vmaCalculateStatistics may give slightly higher accuracy during concurrent VMA usage, but it "has to traverse all internal data structures". vmaGetHeapBudgets is extremely cheap, as it just iterates over (up to a worst case of) VK_MAX_MEMORY_HEAPS number of heaps. Bug: 535175078 Change-Id: Idd245bd60e218f2c24b0b5d486893dee0cf53fa7 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1311138 Reviewed-by: Michael Ludwig <michaelludwig@google.com> Commit-Queue: Noelle Scobie <nscobie@google.com> Reviewed-by: Nathan Sanchez <nathanasanchez@google.com>

查看原文 →
71SCORE
一手来源Skia修复android / gpu-drivers

[graphite] Use ComplementRect for faster bounds intersection tests in Layer ↗

摘要待补：The Rect class provides ComplementRect to perform the negation and swizzle that is normally done per call to `intersect(Rect)` a single time. Saving the ComplementRect of the new draw before iterating the Layers saves some instructions each time it tests a recorded draw. Bug: 419535595 Change-Id: I8f6a2413b001e80c4c11d8167a5b8339f9d954b5 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1283298 Reviewed-by: Nathan Sanchez <nathanasanchez@google.com> Commit-Queue: Michael Ludwig <michaelludwig@google.com>

查看原文 →
72SCORE
一手来源ANGLE规范android / vulkan-opengl

Tests: Fix dEQP build and runtime for Wayland-only configs ↗

摘要待补：Wayland-only builds (angle_use_x11 = false, angle_use_wayland = true) fail to build the dEQP test targets, and working around the build aborts at runtime with a wl_display mismatch. Provide the "xdg-shell.h" header dEQP expects, wire up the missing Wayland protocol deps, and register the Wayland display factory in Wayland-only builds. Make WaylandWindow::setNativeDisplay() adopt the caller's display so the window's wl_surface and ANGLE's Vulkan surface share a wl_display. Bug: angleproject:541518194 Change-Id: I3a19f155604c886c0c663f6630ccb9b3fa0b6dac Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8185015 Reviewed-by: Geoff Lang <geofflang@chromium.org> Commit-Queue: Yuly Novikov <ynovikov@chromium.org> Reviewed-by: Yuly Novikov <ynovikov@chromium.org>

查看原文 →
79SCORE
一手来源Skia发布android / gpu-drivers

Manually Roll Dawn from e832cc409215 to 36cf1fae0cd8 (38 revisions) ↗

摘要待补：This works around a gloop dependency introduced in abseil via http://cl/948608169 Unfortunately, we can't just update to using abseil's bazel_deps because Dawn relies on a fork of abseil. Some notes on cross-platform patch commands: macOS: * macOS uses BSD sed, which requires an explicit backup extension with the -i (in-place) flag (e.g., -i.bak or -i ''). Windows: * Bazel executes Windows patch_cmds_win directly using powershell.exe /c "<cmd>". Do not prefix the command with powershell -Command as the nesting causes issues, which annoyingly, exit with code 0, causing Bazel's fetch to succeed silently even if the patch fails. * By default, Windows PowerShell 5.1's Set-Content writes files using ANSI or UTF-16, which breaks Bazel's Starlark parser. Specifying -Encoding Ascii ensures compatible, clean output. https://dawn.googlesource.com/dawn.git/+log/e832cc409215..36cf1fae0cd8 2026-08-02 rharrison@chromium.org [infra] Add libzstd from cipd to mesa builds 2026-08-02 chrome-automated-expectation@chops-service-accounts.iam.gserviceaccount.com Remove stale WebGPU Compat CTS expectations 2026-08-01 chrome-automated-expectation@chops-service-accounts.iam

查看原文 →
78SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

SQLite Critical CVEs or LLM Slop? (JFrog blog) ↗

摘要待补：The JFrog blog <a href="https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/">examines some reported vulnerabilities in SQLite</a>, some of which made their way into high-profile vulnerability databases, that turned out to be entirely fabricated by LLMs. <p> <blockquote class="bq"> These LLM slop CVEs can cause organizations to waste time investigating and patching vulnerabilities that do not actually exist, as well as polluting vulnerability databases. In environments where Critical vulnerabilities are automatically prioritized or tickets are opened based on vulnerability scores, such fabricated CVEs can turn into a real burden. <p> In environments where AI is used to automate vulnerability triage and remediation this becomes even more concerning. An AI agent that encounters a fabricated CVE may attempt to locate the vulnerable function, generate a patch, or recommend changes based on code that does not even exist. Instead of helping security teams remediate real vulnerabilities, it can lead them down a completely wrong path, potentially introducing unnecessary changes and wasting time. </blockquote> <p>

查看原文 →
68SCORE
发现来源Phoronix文章linux-drm / gpu-drivers / mesa-dri / wayland

Benchmarking Six Linux Distributions On The Framework Laptop 13 Pro ↗

摘要待补：With the new Framework Laptop 13 Pro now shipping powered by Intel Core Ultra Series 3 (Panther Lake) and a brand new hardware design, I have spent the past week testing out various Linux distributions on this very nice high-end laptop. All of the modern Linux distributions tested have been playing nicely with this new Panther Lake laptop. Of course, beyond testing for compatibility I also took the opportunity to run some Linux distribution performance benchmarks for this laptop powered by the flagship Core Ultra X9 388H.

查看原文 →
60SCORE
一手来源OpenHarmony graphic_2d修复openharmony

!31872 merge fix-render-service-connection-limit into master ↗

摘要待补：限制单 pid 的 RSRenderService 连接数 Created-by: chuchengcheng Commit-by: chuchengcheng Merged-by: openharmony_ci Description: **Description:** `RSRenderService::CreateConnection` 对单个 calling pid 可建立的连接数没有上限，恶意客户端可不断创建连接耗尽 RenderService 连接与内存资源（DoS）。 本 PR： 1. 新增 `MAX_CONNECTION_COUNT_PER_PID = 64`（`rs_common_def.h`）；`CreateConnection` 加锁前后双重校验，新建连接（非 token 复用）达上限即拒绝返回 nullptr；`pidConnectionCounts_` 计数，新建自增、`RemoveConnection` 时自减并在归零后擦除。 2. `GetConnection`/`RemoveConnection` 适配 `ConnectionEntry`（含 remotePid 字段）。 **Issue number:** #25421 **Test & Result:** - 静态检查：`git diff --check` 通过；改动行人工核对符合 `.clang-format`（ColumnLimit 120）。 - 未补单测：`RSRenderService` 的 `vsyncManager_`/`screenManager_`/`renderProcessManager_` 默认 nullptr（仅 `Init()` 填充），单测里 `MakeSptr()` 后 `CreateConnection` 首次即 null 解引崩溃，无法用公开 API 建 64 条连接触发上限；状态注入需 `#define private public`，经评估不引入。64-cap 由集成/手工覆盖。 - 单测/构建未在本地执行（缺构建机入口），需 CI 确认。 **CodeCheck:** <table> <thead> <tr> <th>类型</th> <th>自检项</th> <th>自检结果</th> </tr> </thead> <tbody> <tr> <td rowspan="2"><strong>多线程</strong></td> <td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td> <td>Pass：connections_/pidConnecti

查看原文 →
78SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

Four stable kernels for Monday ↗

摘要待补：<p>Greg Kroah-Hartman has announced the release of the <a href="https://lwn.net/Articles/1086901/">7.1.6</a>, <a href="https://lwn.net/Articles/1086903/">6.18.42</a>, <a href="https://lwn.net/Articles/1086904/">6.12.101</a>, and <a href="https://lwn.net/Articles/1086905/">6.6.148</a> stable kernels. Each contains hundreds of patches&mdash;the 7.1.6 kernel has more than 700&mdash;with fixes throughout the tree. Users are advised to upgrade.</p> <p></p>

查看原文 →
78SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

NetBSD 11.0 released ↗

摘要待补：<p>The release of <a href="https://netbsd.org/">NetBSD</a> 11.0, the 19th major version of the operating system, has been <a href="https://lwn.net/Articles/1086899/">announced</a>. There are many changes and enhancements since the 10.1 release, including a new port to RISC-V, better support for Linux system calls in <a href="https://man.netbsd.org/NetBSD-11.0/compat_linux.8"><tt>compat_linux()</tt></a>, as well as improvements to the <a href="https://man.netbsd.org/NetBSD-11.x-BRANCH/npf.7">NPF</a> firewall.</p> <blockquote class="bq"> <p>As you are probably aware, the number of security issues found or suspected everywhere has massively increased with the advent of AI tools. As a consequence, we can't publish a release without open issues. Instead of delaying the release further to fix them (new ones are being reported all the time), we've instead chosen to be transparent about this.</p> </blockquote> <p>See the full <a href="https://netbsd.org/releases/formal-11/NetBSD-11.0.html">release notes</a> for links to the binary distributions and links to the full change logs.</p> <p>

查看原文 →
60SCORE
一手来源OpenHarmony window_manager功能openharmony

!19903 merge master into master ↗

摘要待补：窗口透传插帧开关调用方参数 Created-by: gcw_sPCsris4 Commit-by: gcw_sPCsris4 Merged-by: openharmony_ci Description: **Description:** 窗口透传插帧开关调用方参数 **Issue number:** https://gitcode.com/openharmony/window_window_manager/issues/15337 **Test & Result:** Pass **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：Pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：Pass</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：Pass</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：Pass</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：Pass</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：Pass</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：Pass</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：Pass</td>

查看原文 →
85SCORE
发现来源LWN.net文章linux-drm / gpu-drivers

Security updates for Monday ↗

摘要待补：Security updates have been issued by <b>AlmaLinux</b> (.NET 10.0, .NET 8.0, .NET 9.0, fence-agents, kernel, kernel-rt, openssh, osbuild-composer, perl-Archive-Tar, perl-DBI, perl:5.32, pipewire, python-pillow, qemu-kvm, unbound, and vim), <b>Debian</b> (chromium, incus, kernel, kissfft, libgd2, libmodbus, libssh, node-tar, php8.4, poppler, python-authlib, sslh, and starlette), <b>Fedora</b> (borgbackup, coturn, curl, exim, fuse-overlayfs, gh, GitPython, goaccess, lemonldap-ng, libgit2, nextcloud, nsd, php, postgresql16, python3.12, rabbitmq-server, rust-libgit2-sys, and xen), <b>Mageia</b> (bluez, firmware, kernel, kmod, wireless-regdb), <b>Oracle</b> (buildah, compat-libtiff3, dovecot, fence-agents, firefox, gimp, glibc, grafana, gstreamer1-plugins-bad-free, java-25-openjdk, kernel, libgcrypt, libtiff, libXfont2, nodejs24, nodejs:22, nodejs:24, openssh, openssl, PackageKit, pipewire, python-pillow, rest, sssd, vim, and yelp), <b>SUSE</b> (bind, chromium, dnsdist, gdk-pixbuf-loader-libheif, gio-branding-upstream, google-guest-agent, govulncheck-vulndb, GraphicsMagick, ignition, ImageMagick, keybase-client, kronosnet, libblkid-devel, libntpc1, libpng16, nano, openssh, openssl-1_0_0,

查看原文 →
60SCORE
一手来源ANGLE修复android / vulkan-opengl

Roll vulkan-deps from 9b3fec1aec6c to af17ae0ac3a5 (8 revisions) ↗

摘要待补：https://chromium.googlesource.com/vulkan-deps.git/+log/9b3fec1aec6c..af17ae0ac3a5 Also rolling transitive DEPS: https://chromium.googlesource.com/external/github.com/KhronosGroup/glslang/+log/8d6dd0e41424c25806ca20523430f2e4c3aeb1a1..8211917927d84e358b036eb6c367be8b94b1ff31 https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-Loader/+log/2ee8a4305e28adba291ca156647fdd8e0206a53a..06830240f7a70599053f47b5f10af543e8c3daf6 https://chromium.googlesource.com/external/github.com/KhronosGroup/Vulkan-ValidationLayers/+log/371277a58e41f1943525011611ebd3fe9e6e2140..4a95c038849cd94f470b7a3286c8b35903f4532f If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/vulkan-deps-angle-autoroll Please CC angle-team@google.com,cnorthrop@google.com on the revert to ensure that a human is aware of the problem. To file a bug in ANGLE: https://bugs.chromium.org/p/angleproject/issues/entry To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc

查看原文 →
65SCORE
一手来源OpenHarmony graphic_2d功能openharmony

!31903 merge cherry-pick-mr-31879-1785725820066-auto into master ↗

摘要待补：skip prevaldate tdd when not support Created-by: shi_guoquan Commit-by: s30023221 Merged-by: openharmony_ci Description: **Description:** skip prevaldate tdd when not support **Issue number:** https://gitcode.com/openharmony/graphic_graphic_2d/issues/25445 **Test & Result:** pass **CodeCheck:** <table> <thead> <tr> <th>类型</th> <th>自检项</th> <th>自检结果</th> </tr> </thead> <tbody> <tr> <td rowspan="2"><strong>多线程</strong></td> <td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td> <td>自检结果：pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td> <td>自检结果：pass</td> </tr> <tr> <td rowspan="4"><strong>内存操作</strong></td> <td>调用外部接口时，确认是否对返回值做了判空判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td> <td>自检结果：pass</td> </tr> <tr> <td>内存操作优先使用安全函数，并检查其返回值</td> <td>自检结果：pass</td> </tr> <tr> <td>注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td> <td>自检结果：pass</td> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td> <td>自检结果：pass</td> </tr> <tr> <td rowspan="3"><strong>外部输入</strong></td> <td>所有外部输

查看原文 →
79SCORE
一手来源Skia发布android / gpu-drivers

Roll vulkan-deps from 84f40b5d1039 to af17ae0ac3a5 (1 revision) ↗

摘要待补：https://chromium.googlesource.com/vulkan-deps.git/+log/84f40b5d1039..af17ae0ac3a5 If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/vulkan-deps-skia-autoroll Please CC alexisdavidc@google.com,skiabot@google.com on the revert to ensure that a human is aware of the problem. To file a bug in skia: https://bugs.chromium.org/p/skia/issues/entry To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md Cq-Include-Trybots: skia/skia.primary:Build-Ubuntu24.04-Clang-x86_64-Release-ANGLE;skia/skia.primary:Test-Win11-Clang-Golo-GPU-QuadroP400-x86_64-Debug-All-ANGLE Bug: None Tbr: alexisdavidc@google.com Change-Id: I396c495c025e1b8e342e2daf58bfeacd8a108d93 Reviewed-on: https://skia-review.googlesource.com/c/skia/+/1312916 Bot-Commit: skia-autoroll@skia-public.iam.gserviceaccount.com <skia-autoroll@skia-public.iam.gserviceaccount.com> Commit-Queue: skia-autoroll@skia-public.iam.gserviceaccount.com <skia-autoroll@skia-public.iam.gse

查看原文 →
71SCORE
一手来源OpenHarmony graphic_2d修复openharmony

RSPixelMapFdTrack测试用例修复 ↗

摘要待补：Co-Authored-By: Agent Signed-off-by: 周思远 <zhousiyuan8@huawei.com> AI[100%] Human Fixed[0%] Human[0%] AI Adopted[100%] Co-authored-by: opencode (glm-5.2) <ai@local>

查看原文 →
71SCORE
一手来源ANGLE修复android / vulkan-opengl

OpenCL: add additional validation to GetProgramInfo ↗

摘要待补：Should return CL_INVALID_PROGRAM_EXECUTABLE if no successful program executable been built for at least one device in the list of devices associated with program. This will allow CTS test on test_compiler get_program_info_kernel_names to pass. Bug: angleproject:491161377 Tests-Passing: ocl_cts.test_compiler get_program_info_kernel_names Change-Id: I42361be8739ade5653337c7938a6832f2f1166ae Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/8171686 Reviewed-by: Geoff Lang <geofflang@chromium.org> Reviewed-by: Shahbaz Youssefi <syoussefi@chromium.org> Commit-Queue: Shahbaz Youssefi <syoussefi@chromium.org>

查看原文 →
68SCORE
发现来源Phoronix文章linux-drm / gpu-drivers / mesa-dri / wayland

Linux 7.3 Adding Support For MCTP-Over-USB v1.1 ↗

摘要待补：Within the Linux networking subsystem's "net-next" Git branch there is now queued up support for MCTP-over-USB v1.1. This is the newest version of the standard for sending Management Component Transport Protocol (MCTP) packets over USB for tasks like crash dumps, logging, and firmware updates...

查看原文 →
60SCORE
一手来源OpenHarmony window_manager功能openharmony

!19880 merge master into master ↗

摘要待补：支持模式切换 Created-by: chenjunliang26 Commit-by: chenjunliang26 Merged-by: openharmony_ci Description: **Description:** 支持模式切换 **Issue number:** 支持模式切换 **Test & Result:** 支持模式切换 **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：</td> </tr>

查看原文 →
79SCORE
一手来源ANGLE发布android / vulkan-opengl

Roll VK-GL-CTS from 3b7cbad78e93 to 34b25839e80b (23 revisions) ↗

摘要待补：https://chromium.googlesource.com/external/github.com/KhronosGroup/VK-GL-CTS.git/+log/3b7cbad78e93..34b25839e80b 2026-07-31 dgilhooley@google.com Fix build for LLVM's remove transitive includes 2026-07-31 lorenzo@khronosgroup.org Merge vk-gl-cts/opengl-cts-4.6.8-es-3.2.14 into vk-gl-cts/main 2026-07-31 prdubey@nvidia.com Remove device memory report import and unimport tests 2026-07-31 ziga@lunarg.com Test PrimitiveID matching between tess and geom shaders 2026-07-31 rsinghla@google.com Adding a test case in ShaderExecutor module 2026-07-31 ziga@lunarg.com Test sequential timestamps with different pipeline stages 2026-07-31 rgarcia@igalia.com Decouple occlusion and timestamp queries in multiview tests 2026-07-31 gleese@broadcom.com Fix and re-enable null shading rate attachment tests 2026-07-31 scerveau@igalia.com Video encode: Skip decode-back verification on encode-only devices 2026-07-31 gleese@broadcom.com Allow a small tolerance for depth values in FSR testing 2026-07-31 gleese@broadcom.com Fix synchronisation for shading rate images 2026-07-31 ziga@lunarg.com Add missing check for geometry shader in primitive_restart_index tests 2026-07-31 nath.flagman151@passmail.com Require

查看原文 →
72SCORE
一手来源ANGLE发布android / vulkan-opengl

Roll Chromium from cbb915d67c46 to 9ac349c94b98 (845 revisions) ↗

摘要待补：https://chromium.googlesource.com/chromium/src.git/+log/cbb915d67c46..9ac349c94b98 If this roll has caused a breakage, revert this CL and stop the roller using the controls here: https://autoroll.skia.org/r/chromium-angle-autoroll Please CC angle-team@google.com,cnorthrop@google.com on the revert to ensure that a human is aware of the problem. To file a bug in Chromium: https://bugs.chromium.org/p/chromium/issues/entry To file a bug in ANGLE: https://bugs.chromium.org/p/angleproject/issues/entry To report a problem with the AutoRoller itself, please file a bug: https://issues.skia.org/issues/new?component=1389291&template=1850622 Documentation for the AutoRoller is here: https://skia.googlesource.com/buildbot/+doc/main/autoroll/README.md DEPS, submodule, and //infra/config changes generated by running: scripts/roll_chromium_deps_v2.py --revision 9ac349c94b98903e8bbc2667eddd5b067fabdb9f --verbose --autoroll --ignore-unclean-workdir Repo entries: build: https://chromium.googlesource.com/chromium/src/build.git/+log/8cfa312efc..e7f0a9741b testing: https://chromium.googlesource.com/chromium/src/testing/+log/3bcd8c9b2b..51366d6ae0 third_party/android_deps: https://chromium.

查看原文 →
71SCORE
一手来源OpenHarmony window_manager功能openharmony

add isinuse ↗

摘要待补：Signed-off-by: wangdi <wangdi154@huawei.com>

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19905 merge 83_master into master ↗

摘要待补：fix bug Created-by: hearn Commit-by: Hearn Merged-by: openharmony_ci Description: **Description:** **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：</td> </tr> <tr> <td>外部输入包括对外提供的接口，IP

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19821 merge master into master ↗

摘要待补：fix code alarm Created-by: weixin_38774524 Commit-by: weixin_38774524 Merged-by: openharmony_ci Description: **Description:** **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：</td> </tr> <tr>

查看原文 →
57SCORE
一手来源OpenHarmony window_manager功能openharmony

!19811 merge 727warn into master ↗

摘要待补：第三轮代码告警处理 Created-by: zhangtao76823 Commit-by: zhangtao76823 Merged-by: openharmony_ci Description: **Description:** **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：</td> </tr> <tr> <t

查看原文 →
69SCORE
一手来源OpenHarmony graphic_2d驱动openharmony

!31891 merge sec into master ↗

摘要待补：fix(render_service): 安全加固IPC nullptr检查/加锁/原子化/错误码/负数防护/资源泄漏修复 Created-by: zhangzhichao0091 Commit-by: zhangzhichao0091 Merged-by: openharmony_ci Description: **Description:** Render Service 模块安全加固，修复多处 nullptr 解引用、未加锁并发访问、整数溢出、资源泄漏等稳定性缺陷。涉及 38 文件 + 1 新测试文件，964 增/117 删。 主要改动： - IPC proxy/stub: Remote() nullptr 检查, stub switch 内 for-break 用标志位修正跳转 - RSRenderServiceConnectHub: 加 onConnectCallbackMutex_/callbackMutex_ 保护回调, 多处 GetInstance/connHub nullptr 检查, ConnectDied 用 lock_guard 替换手动 lock/unlock - forceHpsBlurDisabled_ 改 std::atomic<bool>, isRegistered 改 atomic+exchange - RSDividedUICapture: pixmapWidth/Height<=0 检查, size 溢出防护, ReadPixels 失败补 munmap, renderContext nullptr 检查 - RSRenderThread: GetRenderContext nullptr 检查, Stop 调整 handler_/receiver_ 置空时机, cacheDir 加锁 - RSRenderInterface: callback/rect nullptr 检查 - GetMaxGpuBufferSize 出参清零+错误码, GetSplitTransactionCheckInterval/GetParallelRenderingEnabled 负数/越界防护 - 补充单元测试覆盖各分支 **Issue number:** #25432 **Test & Result:** - 静态自检: git diff --check 无空白错误(CRLF 文件 \r 警告为行尾格式, 非真正问题) - 符号一致性核对通过(mutex 定义/声明、atomic 类型、include 对应) - 未执行编译/单测(无构建环境入口), 需后续在 CI 验证 - 新增单元测试覆盖 SetOnConnectCallback/SetOnDiedCallback/RemoveOnDiedCallback/GetDefau

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19857 merge ai_warn into master ↗

摘要待补：ai warn fix Created-by: wellplay Commit-by: Peng fafu Merged-by: openharmony_ci Description: **Description:** **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：pass</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：pass</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：pass</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：pass</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：pass</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：pass</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：pass</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：pass</td>

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19869 merge time_check into master ↗

摘要待补：fix timeout check Created-by: wellplay Commit-by: Peng fafu Merged-by: openharmony_ci Description: **Description:** **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：pass</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：pass</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：pass</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：pass</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：pass</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：pass</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：pass</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：pass</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：pass

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19906 merge fix_focus_on_show into master ↗

摘要待补：修复focusOnShow 未返回正常错误码 Created-by: rsyys Commit-by: rsyys Merged-by: openharmony_ci Description: **Description:** 修复focusOnShow 未返回正常错误码 **Issue number:** **Test & Result:** **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：</td> </tr> <tr> <td>所有外部输入均不可信，需判断外部输入是否直接作为内存分配的大小，数组下标、循环条件、SQL查询等</td><td>自检结果：</td> </tr> <tr> <td>外部输入的路径不可信，需使用realpath做标准化处理，并判断路径的合法性</td><td>自检结果：</td> </tr>

查看原文 →
57SCORE
一手来源OpenHarmony window_manager修复openharmony

!19723 merge fix-code-warning into master ↗

摘要待补：fix(wms-layout): harden resize gravity and drag event handling Created-by: Angus-Liu96 Commit-by: liuanguang Merged-by: openharmony_ci Description: **Description:** fix(wms-layout): add null pointer check **Issue number:** https://gitcode.com/openharmony/window_window_manager/issues/15211 **Test & Result:** PASS **CodeCheck:** <table> <tr> <th>类型</th><th>自检项</th><th>自检结果</th> </tr> <tr> <td rowspan="2">多线程相关</td><td>在类的成员变量中定义了vector/map/list等容器类型，且在多个成员函数中有操作时，需要加锁保护</td><td>自检结果：</td> </tr> <tr> <td>定义全局变量，在多个函数中都有操作时，需要加锁保护</td><td>自检结果：PASS</td> </tr> <tr> <td rowspan="4">内存相关</td><td>调用外部接口时，确认是否对返回值做了判断，尤其外部接口返回了nullptr的情况，避免进程崩溃</td><td>自检结果：PASS</td> </tr> <tr> <td>调用安全函数时，如memcpy_s等，是否检查其返回值</td><td>自检结果：PASS</td> </tr> <tr> <td>检查函数中是否涉及了内存或资源申请（如文件句柄），注意每个异常退出流程，是否都已经将资源释放（推荐使用RAII）</td><td>自检结果：PASS</td> </tr> </tr> <tr> <td>隐式内存分配场景：realpath、ReadParcelable序列化、cJSON相关函数时等，需主动释放或使用智能指针</td><td>自检结果：PASS</td> </tr> <tr> <td rowspan="4">校验外部输入</td><td>使用nlohmann:json解析外部输入时，需判断参数类型是否符合预期</td><td>自检结果：PASS</td> </tr> <tr> <td>所有外部输

查看原文 →