master

文件	最后提交记录	最后更新时间
domain	fix(engine): 崩溃硬化——关键路径 CHECK/abort 改受控失败，修复 UAF/值拷贝/反序列化越界缺陷 - 关键入口（NAPI/JNI/deserializer/serializer/footstone 等）将输入非法即 abort 的 FOOTSTONE_CHECK/checked_numeric_cast 改为判空/越界校验后的受控返回，生产不再 SIGABRT - devtools tcp/websocket 通道析构先 stop+join 再销毁成员（修 UAF）；tcp 帧解码重写 （body_size 校验 + int64 防溢出 + 循环内重算 stream 长度） - performance RemoveEntry / dom_node UpdateObjectStyle 值拷贝改引用（erase/更新落到 真实容器）；deserializer 补两字节串长度换算、varint 截断标志、递归深度限制 - RunScriptFromUri 增加 task runner/context 判空（引擎销毁竞态下不再空指针解引用） - 补 bug 回归用例 performance-clearmarks（11-crash-hardening）并接入 manifest	1 个月前
model	fix(engine): 崩溃硬化——关键路径 CHECK/abort 改受控失败，修复 UAF/值拷贝/反序列化越界缺陷 - 关键入口（NAPI/JNI/deserializer/serializer/footstone 等）将输入非法即 abort 的 FOOTSTONE_CHECK/checked_numeric_cast 改为判空/越界校验后的受控返回，生产不再 SIGABRT - devtools tcp/websocket 通道析构先 stop+join 再销毁成员（修 UAF）；tcp 帧解码重写 （body_size 校验 + int64 防溢出 + 循环内重算 stream 长度） - performance RemoveEntry / dom_node UpdateObjectStyle 值拷贝改引用（erase/更新落到 真实容器）；deserializer 补两字节串长度换算、varint 截断标志、递归深度限制 - RunScriptFromUri 增加 task runner/context 判空（引擎销毁竞态下不再空指针解引用） - 补 bug 回归用例 performance-clearmarks（11-crash-hardening）并接入 manifest	1 个月前
request	refactor: rename hippy/Hippy files and symbols to flexui/FlexUI Phase 2 of rebrand: - Rename files/directories with hippy/Hippy in name - Replace all Hippy→FlexUI and hippy→flexui text references - Includes import/include paths, class names, function names, comments Co-Authored-By: Claude <noreply@anthropic.com>	3 个月前
domain_dispatch.cc	fix(devtools): repair CDP pipeline for DevTools inspector - InitDevTools: call JsDriverUtils::InitDevTools in scope init callback to set VmRequestHandler (both OHOS js_driver_napi.cc and Android js_driver_jni.cc). Fixes Runtime/Debugger domain messages not reaching JS VM. - Styles panel: add MergeStyleWithLayout() to populate computed layout properties (width/height/margin/padding/border) into the style JSON when GetStyleMap() returns empty (OHOS native-render mode). - Sources panel: add diagnostic logging to JSH inspector (SendMessageToJSH/HandleRecvMessage). Confirmed CDP messages are sent to V8 Inspector via WebSocket port 9225, but OH_JSVM V8 Inspector returns no CDP responses — platform limitation. - Build system: fix build-hap.sh to run build-engine.sh before ohpm install, ensuring output/flexui_engine.har contains the latest native .so. - Add diagnostic logs to domain_dispatch.cc and tunnel_service.cc (FOOTSTONE_LOG for is_inspect_domain routing and vm_request state). - Add JSH inspector SEND/RECV OH_LOG_ERROR diagnostics to track VM CDP message flow (FOOTSTONE_LOG was not outputting in the driver/js library). - Document full investigation in docs/bugfix/.	2 个月前