[rpms/chromium] epel9-next: - update to 122.0.6261.69

[rpms/chromium] epel9-next: - update to 122.0.6261.69

[Than Ngo]

            A new commit has been pushed.

            Repo   : rpms/chromium
            Branch : epel9-next
            Commit : 55c38ba66d02c7b2746e0f70d38f15ff81ef74f4
            Author : Than Ngo <than@redhat.com>
            Date   : 2024-02-23T14:31:58+01:00
            Stats  : +46/-2 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/chromium/c/55c38ba66d02c7b2746e0f70d38f15ff81ef74f4?branch=epel9-next

            Log:
            - update to 122.0.6261.69
- fix build error on el8
- bz#2265039, built with -fwrapv for improved memory safety
- bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability

---
diff --git a/chromium-122-clang-build-flags.patch b/chromium-122-clang-build-flags.patch
new file mode 100644
index 0000000..dc1508d
--- /dev/null
+++ b/chromium-122-clang-build-flags.patch
@@ -0,0 +1,17 @@
+diff -up chromium-122.0.6261.57/build/config/compiler/BUILD.gn.me chromium-122.0.6261.57/build/config/compiler/BUILD.gn
+--- chromium-122.0.6261.57/build/config/compiler/BUILD.gn.me	2024-02-23 12:32:11.248584653 +0100
++++ chromium-122.0.6261.57/build/config/compiler/BUILD.gn	2024-02-23 12:45:26.672302958 +0100
+@@ -399,6 +399,13 @@ config("compiler") {
+       }
+     }
+ 
++    if (is_clang) {
++      cflags += [ "-ftrivial-auto-var-init=zero" ]
++      if (!is_ubsan && !is_ubsan_security) {
++        cflags += [ "-fwrapv" ]
++      }
++    }
++
+     # Linker warnings.
+     if (fatal_linker_warnings && !is_apple && current_os != "aix" &&
+         current_os != "zos") {

diff --git a/chromium-122-python3-assignment-expressions.patch b/chromium-122-python3-assignment-expressions.patch
new file mode 100644
index 0000000..61ce037
--- /dev/null
+++ b/chromium-122-python3-assignment-expressions.patch
@@ -0,0 +1,13 @@
+diff -up chromium-122.0.6261.57/tools/json_to_struct/json_to_struct.py.me chromium-122.0.6261.57/tools/json_to_struct/json_to_struct.py
+--- chromium-122.0.6261.57/tools/json_to_struct/json_to_struct.py.me	2024-02-23 12:04:45.451423995 +0100
++++ chromium-122.0.6261.57/tools/json_to_struct/json_to_struct.py	2024-02-23 12:18:04.099824392 +0100
+@@ -124,7 +124,8 @@ def _GenerateH(basepath, fileroot, head,
+     f.write(u'#include <cstddef>\n')
+     f.write(u'\n')
+ 
+-    if system_headers := schema.get(u'system-headers', []):
++    system_headers = schema.get(u'system-headers', [])
++    if system_headers:
+       for header in system_headers:
+         f.write(u'#include <%s>\n' % header)
+       f.write(u'\n')

diff --git a/chromium.spec b/chromium.spec
index 5a6db8d..d3b58aa 100644
--- a/chromium.spec
+++ b/chromium.spec
@@ -300,7 +300,7 @@
 %endif
 
 Name:	chromium%{chromium_channel}
-Version: 122.0.6261.57
+Version: 122.0.6261.69
 Release: 1%{?dist}
 Summary: A WebKit (Blink) powered web browser that Google doesn't want you to use
 Url: http://www.chromium.org/Home
@@ -452,6 +452,12 @@ Patch312: chromium-119-fstack-protector-strong.patch
 Patch313: chromium-122-static-assert.patch
 Patch314: chromium-122-clang16-buildflags.patch
 
+# assignment-expressions not suport in python < 3.8 on el 7/8
+Patch315: chromium-122-python3-assignment-expressions.patch
+
+# add -ftrivial-auto-var-init=zero and -fwrapv
+Patch316: chromium-122-clang-build-flags.patch
+
 # build error
 Patch351: chromium-121-mnemonic-error.patch
 
@@ -1119,8 +1125,9 @@ udev.
 %patch -P130 -p1 -b .revert-av1enc
 %endif
 
-%ifarch aarch64
 %if 0%{?rhel} <= 8
+%patch -P315 -p1 -b .assignment-expressions
+%ifarch aarch64
 %patch -P305 -p1 -b .memory_tagging
 %endif
 %endif
@@ -1136,6 +1143,7 @@ udev.
 %patch -P310 -p1 -b .missing-header-files
 %patch -P311 -p1 -b .clang-warnings
 %patch -P312 -p1 -b .fstack-protector-strong
+%patch -P316 -p1 -b .clang-build-flags
 
 %patch -P351 -p1 -b .mnemonic-error
 
@@ -1934,6 +1942,12 @@ getent group chrome-remote-desktop >/dev/null || groupadd -r chrome-remote-deskt
 %{chromium_path}/chromedriver
 
 %changelog
+* Fri Feb 23 2024 Than Ngo <than@redhat.com> - 122.0.6261.69-1
+- update to 122.0.6261.69
+- fix build error on el8
+- bz#2265039, built with -fwrapv for improved memory safety
+- bz#2265043, built with -ftrivial-auto-var-init=zero for improved security and preditability
+
 * Wed Feb 21 2024 Than Ngo <than@redhat.com> - 122.0.6261.57-1
 - update to 122.0.6261.57
    * High CVE-2024-1669: Out of bounds memory access in Blink