Thursday, July 30, 2009

Dev Channel Update: More progress on Mac and Linux

Update (7/31/09 - laforge): 3.0.196.2 has been release which contains only a single change that reverts the tab focus experiment.

3.0.196.0 has been released to the dev channel with the following changes:

All:
  • Crash fixes

Windows:
  • Cursor no longer flickers over the omnibox and other editable controls.
  • Disconnecting a monitor and restarting Google Chrome no longer leaves windows off in space and impossible to access.

Linux:
  • Google Chrome now respects the system font hinting/antialiasing setting.
  • Added a password manager dialog (Options -> Personal -> Show Saved Passwords).
  • Fixed an issue where scrolling a long page by dragging the scrollbar would lag significantly.
  • Dragging a tab off and dropping it puts the dropped window where you dropped it.

Mac:
  • Trackpad scrolling on maps works again.
  • First stab at history menu.
  • Download shelf now has real download items.
  • Lots of polish bugs.

Extensions:

  • Introduce moles! These are a new extra area that can pop up above toolstrips.
  • Themes now work with --load-extension.
  • You can now reload extensions from a button on chrome://extensions.
  • Fix bug where bookmarks.getTree() doesn't return any bookmarks.
  • Minimum auto-update frequency from command line is now 30 seconds.
  • (Re-)enable content scripts executing in isolated worlds.

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

The Google Chrome Team

Stable Update: Back Button Fix


This is a small release to fix an issue with the back button on some popular web sites (reverting r15950).  

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt
Engineering Program Manager

Wednesday, July 29, 2009

Dev Channel Update: 3.0.195.4

Windows dev channel has been updated to 3.0.195.4.

This update contains some additional fixes to themes support, in addition to some crash fixes.

More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Anthony Laforge
Google Chrome Program Manager

Tuesday, July 28, 2009

Dev Channel Update: 3.0.195.3

This release contains crash and stability fixes as well as patches for:
  • Our brand new tab page
  • Themes
  • The video tag
More details about additional changes are available in the svn log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Anthony Laforge
Google Chrome Program Manager

Thursday, July 23, 2009

Beta Channel Update

Google Chrome 3.0.193.2 has been released to the Beta channel. Some principal changes release since 2.0.172.37:

  • Updated V8 to 1.2.13.2 to improve stability and performance.
  • Printing fixes and print selection for Windows.
  • Initial support for the video tag.
  • Updated look and feel of the url bar (aka the Omnibox).
  • Improved our Developer Tools by adding the scripts and profiles tabs, plus support for docking the inspector into the main window.
In addition to some minor UI changes:
  • Minor Tweaks renamed as "Personal Stuff" in the Options menu
  • Browsing data options added to the Options menu, under Personal Stuff.
  • Default download location and font/language settings moved from Minor Tweaks to the Under the hood tab
  • Exceptions is a tab in the "Passwords and Exceptions" dialog, rather than a separate button in the Passwords section of the Options menu.
  • Removed the "show mixed content" option.
You can install the current Beta channel release from http://www.google.com/intl/en/landing/chrome/beta/.

Anthony Laforge
Google Chrome Program Manager

Wednesday, July 22, 2009

Dev Channel Update: 3.0.195.1

This week's update includes changes for Windows, Mac and Linux. Significant changes include:
  • Form suggestions now shrink properly as the list of suggestions gets shorter. (Issue: 15334)
  • Extensions can now auto-update. (Issue: 12117)
  • Set the default minimum font size to 12 for Chinese and 10 for Japanese, Korean, Arabic and Thai. (Issues: 16868, 16875)
  • Mac now supports drag and drop of URLs, plain text, and HTML into
  • and out of the content area, as well as within text fields and the
    thumbnails on the new tab page. URLs can be dragged to and from other
    apps, the Finder/Desktop, and the Dock.
  • (Mac) Fix for download shelf crash when clearing all downloads. (Issues: 15855, 15893)
  • (Mac) First cut at infobars. Not pretty, just functional. (Issues: 15839, 14937, 14462, 16487)
  • (Mac) Add JavaScript Console menu item to View > Developer submenu. (Issue: 16135)
  • (Linux) Allow dragging a link from the web contents to the bookmark bar to get a named bookmark. (Issue: 16791)
  • (Linux) Add additional hotkeys (Ctrl-Enter, Shift-F5, Shift+Scroll Wheel). (Issue: 16792)
  • (Linux) Dockable developer tools.
More details about additional changes are available in the release notes and the log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt
Engineering Program Manager

Friday, July 17, 2009

Dev Channel Update: 3.0.194.3


Google Chrome 3.0.194.3 has been released to the Dev channel for Mac and Linux.  Windows remains on 3.0.193.1.

Highlights in this release:
  • Linux: Restarting should no longer lose all session information.
  • Fix for crash when saving files. (Issue: 15555)
  • Fix a crash while dragging (and closing a tab). (Issue: 16280)
  • Linux: Fixes "fonts stop rendering after a few minutes" (Issue: 16403)
  • Linux: Fixes the "no pages load on 64-bit" issue.
More details are available in the release notes and the log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.
Jonathan Conradt
Engineering Program Manager

Thursday, July 16, 2009

Stable, Beta update: Bug fixes


[Update: Added CVE numbers for the security issues. --mal@chromium.org, 21 July 2009]

Google Chrome 2.0.172.37 has been released to the Beta and Stable channels. This release fixes some minor bugs:

  • Fix: Solving captcha images broken at orkut.com. (Issue 15569)
  • Make forward/backward navigation work even when redirection is involved. (Issue 9663, issue 10531)
  • Fix: Daylight savings time not recognized for some CET locales. (Issue 12579)
  • Fix a browser crash on closing a URL request. (Issue 8942)
  • Update the V8 Javascript engine to version 1.1.10.14 to fix issues with regular expressions.
  • Update Gears to the latest release, 0.5.25.0.

In addition, this release fixes the following security issues:

CVE-2009-2555 Heap overflow with Javascript regular expressions

Evaluating a specially-crafted regular expression in Javascript on a web page can lead to memory corruption and possibly a heap overflow. Visiting a maliciously crafted website may lead to a renderer (tab) crash or arbitrary code execution in the Google Chrome sandbox.

More info: http://code.google.com/p/chromium/issues/detail?id=14719 (This issue will be made public once a majority of users are up to date with the fix.)

Severity: High. An attacker might be able to run arbitrary code within the Google Chrome sandbox.

Credit: This issue was found by the Google Chrome security team.

Mitigations:
  • A victim would need to visit a page under an attacker's control.
  • Any code that an attacker might be able to run inside the renderer process would be inside the sandbox. Click here for more details about sandboxing.


CVE-2009-2556 Memory corruption in the browser process

A compromised renderer (tab) process could cause the browser process to allocate very large memory buffers. This error could cause the browser process (and all tabs) to crash or possibly allow arbitrary code execution with the privileges of the logged on user. To exploit this vulnerability, an attacker would need to be able to run arbitrary code inside the renderer process.

Severity: Critical. In conjunction with a vulnerability allowing arbitrary code to run in the renderer, an attacker might be able to run code with the privileges of the logged on user.

Credit: This issue was found by the Google Chrome security team.

Mitigations:
  • A victim would need to visit a page under an attacker's control.
  • The attacker must exploit a second vulnerability to control the renderer process.

Friday, July 10, 2009

Dev Channel Update: Usability and stability fixes

Update:

Google Chrome 3.0.193.1 has been released to the Dev channel to fix a small set crashes related to: V8, autocomplete, tab dragging, and context menus (bugs 16276, 13500, 16280, 14594).

Original post:

Google Chrome 3.0.193.0 has been released to the Dev channel for Windows.

Highlights in this release:
  • Fixed issue 15199 where new windows are opened off screen, in certain conditions, for dual monitor users.
  • Fixed issue 16052 where a tab would close if a new url was navigated to too quickly during a page load.
  • Alerts/authentication windows are no longer wrapped by an OS window.
  • Windowed plugins like Flash no longer hang after a print dialog is displayed.
  • Updated V8 to 1.2.13.2 to fix some crashes

More details are available in the release notes and the log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Anthony Laforge
Google Chrome Program Manager

Wednesday, July 8, 2009

Dev Channel Update: More progress on Mac and Linux

Google Chrome 3.0.192.x has been released to the Dev channel for Windows, Linux and Mac.

Highlights in this release:
  • (Mac) Enabled support for the Mac OS X spellchecking service.
  • (Mac) First cut at popup blocking for Mac.
  • (Linux) Accelerator keys like ctl-C for copy should work again.
  • (Linux) Initial support of complex text (e.g. Arabic). Bug reports welcome.
  • (Linux) Initial GTK theme support.
  • (Linux) IME support.
  • (Extensions) Breaking API Change: page_actions.icon renamed to
  • page_action.icons and changed from a single string to an array of
  • strings.
  • (All) Added support for exporting/ importing bookmarklet bookmarks, thanks to Thiago.
  • (All) Fixed Acid3 Test 48: LINKTEST

Known issues:
  • Issue 15199: New windows open off screen, in certain conditions, for dual montior users.
  • Issue 16052: Tab closes if a new url is navigated to quickly during a page load.

More details are available in the release notes and the log of all revisions.

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Anthony Laforge
Google Chrome Program Manager

Monday, July 6, 2009

Dev update: Animated GIF Fix


Google Chrome 3.0.191.3 has been released to the Dev channel for Windows, Linux and Mac.

Highlights in this release:
  • Animated GIFs fixed.
  • Extensions changes, see Dev Channel Visible Changes post to the Chromium-Extensions mailing list.
  • Printing fixes for Windows.
  • Try out the New New Tab Page by using the command line switch --new-new-tab-page.  Don't wait for the new new new tab page, get yours today!
  • Linux now supports IME for non-roman script languages.
  • Fixes for misbehaving proxy servers.
  • "Save As" now available on Mac.
  • More details are available in the release notes and the log of all revisions.
Known issues:
  • Issue 15846: (Mac) Google docs : shortcut to save a document (Command+S) is not implemented
  • Issue 15844: (Linux) Bookmarks bar context menus disabled on first open of bookmark manager
  • Issue 15845: (Linux) Bookmarks that do not fit in the bookmarks bar cannot be accessed
  • Issue 15848: Thumbnails on New Tab Page don't have spacing in between

You can find out about getting on the Dev channel here: http://dev.chromium.org/getting-involved/dev-channel.

If you find new issues, please let us know by filing a bug at http://code.google.com/p/chromium/issues/entry.

Jonathan Conradt
Engineering Program Manager
Google Chrome