[webkit-reviews] review requested: [Bug 239154] [CoreIPC][WebGL] Heap Buffer Overflow from CoreIPC WebGL MultiDraw* due to discarded firsts/counts length in favour of attacker controlled drawcount : [Attachment 458001] Patch

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Wed Apr 20 11:50:34 PDT 2022


John Cunningham <johncunningham at apple.com> has asked  for review:
Bug 239154: [CoreIPC][WebGL] Heap Buffer Overflow from CoreIPC WebGL MultiDraw*
due to discarded firsts/counts length in favour of attacker controlled
drawcount
https://bugs.webkit.org/show_bug.cgi?id=239154

Attachment 458001: Patch

https://bugs.webkit.org/attachment.cgi?id=458001&action=review




--- Comment #13 from John Cunningham <johncunningham at apple.com> ---
Created attachment 458001

  --> https://bugs.webkit.org/attachment.cgi?id=458001&action=review

Patch


More information about the webkit-reviews mailing list