[webkit-changes] [WebKit/WebKit] 0fcfda: [WebGPU] out of bounds access to shaderStage array...

[mwyrzykowski]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 0fcfda2cd76d01cc4b5494cb75345b951bc1a64d
      https://github.com/WebKit/WebKit/commit/0fcfda2cd76d01cc4b5494cb75345b951bc1a64d
  Author: Mike Wyrzykowski <mwyrzykowski at apple.com>
  Date:   2024-12-11 (Wed, 11 Dec 2024)

  Changed paths:
    A LayoutTests/fast/webgpu/nocrash/fuzz-284335-expected.txt
    A LayoutTests/fast/webgpu/nocrash/fuzz-284335.html

  Log Message:
  -----------
  [WebGPU] out of bounds access to shaderStage array in Device::createBindGroup
https://bugs.webkit.org/show_bug.cgi?id=284335
rdar://141184676

Reviewed by Dan Glastonbury.

Not a security issue but placing visibility = 0 on a bind group entry
resulted in a crash since EnumeratedArray release asserts on out of
bounds access.

* LayoutTests/fast/webgpu/nocrash/fuzz-284335-expected.txt: Added.
* LayoutTests/fast/webgpu/nocrash/fuzz-284335.html: Added.
Add regression test.

* Source/WebGPU/WebGPU/BindGroup.mm:
(WebGPU::Device::createBindGroup):
Only necessary if the shader stage != Undefined.

Canonical link: https://commits.webkit.org/287687@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications