[webkit-changes] [WebKit/WebKit] 12be93: [WebGPU] Crash in RenderBundleEncoder::setBindGroup

[mwyrzykowski]

  Branch: refs/heads/main
  Home:   https://github.com/WebKit/WebKit
  Commit: 12be93dae369f8365c7ae4656f149b8da408d7f3
      https://github.com/WebKit/WebKit/commit/12be93dae369f8365c7ae4656f149b8da408d7f3
  Author: Mike Wyrzykowski <mwyrzykowski at apple.com>
  Date:   2024-07-08 (Mon, 08 Jul 2024)

  Changed paths:
    A LayoutTests/fast/webgpu/nocrash/fuzz-276279-expected.txt
    A LayoutTests/fast/webgpu/nocrash/fuzz-276279.html
    M Source/WebGPU/WebGPU/RenderBundleEncoder.mm

  Log Message:
  -----------
  [WebGPU] Crash in RenderBundleEncoder::setBindGroup
https://bugs.webkit.org/show_bug.cgi?id=276279
<radar://130758821>

Reviewed by Tadeu Zagallo.

An encoder which becomes invalid will have a zero sized fragment
buffer container, add a check to avoid out of bounds access.

* LayoutTests/fast/webgpu/nocrash/fuzz-276279-expected.txt: Added.
* LayoutTests/fast/webgpu/nocrash/fuzz-276279.html: Added.
* Source/WebGPU/WebGPU/RenderBundleEncoder.mm:
(WebGPU::RenderBundleEncoder::setBindGroup):

Canonical link: https://commits.webkit.org/280740@main



To unsubscribe from these emails, change your notification settings at https://github.com/WebKit/WebKit/settings/notifications