Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 144aa0db1a51ac0b8a993f17bd35a136fb4a6b4a
https://github.com/WebKit/WebKit/commit/144aa0db1a51ac0b8a993f17bd35a136fb4a6b4a
Author: Mike Wyrzykowski <[email protected]>
Date: 2026-06-30 (Tue, 30 Jun 2026)
Changed paths:
A
LayoutTests/fast/webgpu/pipeline-id-collision-bindgroup-validation-bypass-expected.txt
A
LayoutTests/fast/webgpu/pipeline-id-collision-bindgroup-validation-bypass.html
M Source/WebGPU/WebGPU/ComputePipeline.mm
M Source/WebGPU/WebGPU/Device.h
M Source/WebGPU/WebGPU/RenderPipeline.mm
Log Message:
-----------
[GPUP] WebGPU BindGroup Validation-Cache Key Collision Leads to GPU OOB Write
https://bugs.webkit.org/show_bug.cgi?id=313360
rdar://174662781
Reviewed by Dan Glastonbury.
Share identifiers for render and compute pipelines to avoid
validation succeeding for a given bind group + render pipeline
which was validated for the hash key identical to the same
bind group but with a compute pipeline which has the same key.
* Source/WebGPU/WebGPU/ComputePipeline.mm:
* Source/WebGPU/WebGPU/Device.h:
* Source/WebGPU/WebGPU/RenderPipeline.mm:
Originally-landed-as: 305413.739@safari-7624-branch (427fc7a6307d).
rdar://180429272
Canonical link: https://commits.webkit.org/316116@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
