Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 0fcfda2cd76d01cc4b5494cb75345b951bc1a64d
https://github.com/WebKit/WebKit/commit/0fcfda2cd76d01cc4b5494cb75345b951bc1a64d
Author: Mike Wyrzykowski <[email protected]>
Date: 2024-12-11 (Wed, 11 Dec 2024)
Changed paths:
A LayoutTests/fast/webgpu/nocrash/fuzz-284335-expected.txt
A LayoutTests/fast/webgpu/nocrash/fuzz-284335.html
Log Message:
-----------
[WebGPU] out of bounds access to shaderStage array in Device::createBindGroup
https://bugs.webkit.org/show_bug.cgi?id=284335
rdar://141184676
Reviewed by Dan Glastonbury.
Not a security issue but placing visibility = 0 on a bind group entry
resulted in a crash since EnumeratedArray release asserts on out of
bounds access.
* LayoutTests/fast/webgpu/nocrash/fuzz-284335-expected.txt: Added.
* LayoutTests/fast/webgpu/nocrash/fuzz-284335.html: Added.
Add regression test.
* Source/WebGPU/WebGPU/BindGroup.mm:
(WebGPU::Device::createBindGroup):
Only necessary if the shader stage != Undefined.
Canonical link: https://commits.webkit.org/287687@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
[email protected]
https://lists.webkit.org/mailman/listinfo/webkit-changes
