 +                CFUserNotificationRef dialog = CFUserNotificationCreate( NULL, 0, kCFUserNotificationUseRadioButtonsFlag | kCFUserNotificationNoteAlertLevel | CFUserNotificationCheckBoxChecked( 0 ), &err, parameters );
 +                CFOptionFlags responseFlags = 0;
 +                CFUserNotificationReceiveResponse( dialog, 0, &responseFlags );
++                CFRelease( choose );
++                CFRelease( certsValues );
++                CFRelease( parameters );
++                CFRelease( dialog );
 +                if( !( responseFlags & kCFUserNotificationCancelResponse ) )
 +                {
 +                    for( int i = 0; i < count; i++ )

+                    CFStringEncoding encoding = ( CFByteOrderLittleEndian == CFByteOrderGetCurrent() ) ? kCFStringEncodingUTF32LE : kCFStringEncodingUTF32BE;
+                    CFStringRef string = CFStringCreateWithBytes( NULL, (uint8_t *)names[i], wcslen( names[i] ) * sizeof( wchar_t ), encoding, false );
+                    CFArrayAppendValue( certsValues, string );
+                }
+
+                std::string authhost = request.host_and_port.host();

 sandbox/win/src/process_mitigations.cc        |   4 +
 .../service_manager/sandbox/mac/common.sb     |   8 ++
 third_party/boringssl/BUILD.generated.gni     |   2 +
 20 files changed, 415 insertions(+), 45 deletions(-)

diff --git a/chrome/app/chromium_strings.grd b/chrome/app/chromium_strings.grd
index eaee8343c13d..47399f7e13a4 100644
