Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[WebGPU] Queue::writeTexture may write outside its temporary buffer #28735

Conversation

mwyrzykowski
Copy link
Contributor

@mwyrzykowski mwyrzykowski commented May 17, 2024

@mwyrzykowski mwyrzykowski self-assigned this May 17, 2024
@mwyrzykowski mwyrzykowski added the WebGPU For bugs in WebGPU label May 17, 2024
@mwyrzykowski mwyrzykowski requested a review from djg May 17, 2024 23:20
Copy link
Contributor

@djg djg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

:shipit:

@mwyrzykowski mwyrzykowski force-pushed the eng/WebGPU-QueuewriteTexture-may-write-outside-its-temporary-buffer branch from 337bad4 to 6f8e343 Compare May 20, 2024 22:40
@mwyrzykowski mwyrzykowski force-pushed the eng/WebGPU-QueuewriteTexture-may-write-outside-its-temporary-buffer branch from 6f8e343 to 78ddfc1 Compare May 21, 2024 00:34
@mwyrzykowski mwyrzykowski added the unsafe-merge-queue Applied to send a pull request to merge-queue, but skip building and testing label May 21, 2024
https://bugs.webkit.org/show_bug.cgi?id=274171
<radar://128064885>

Reviewed by Dan Glastonbury.

bytesPerImage must be a multiple of the blockHeight, but the division
was occurring outside the max() operation instead of inside the right
hand side.

* LayoutTests/TestExpectations:
* LayoutTests/fast/webgpu/fuzz-274171-expected.txt: Added.
* LayoutTests/fast/webgpu/fuzz-274171.html: Added.
Add regression test.

* Source/WebGPU/WebGPU/Queue.mm:
(WebGPU::Queue::writeTexture):

Canonical link: https://commits.webkit.org/279027@main
@webkit-commit-queue webkit-commit-queue force-pushed the eng/WebGPU-QueuewriteTexture-may-write-outside-its-temporary-buffer branch from 78ddfc1 to 33e3b62 Compare May 21, 2024 00:38
@webkit-commit-queue
Copy link
Collaborator

Committed 279027@main (33e3b62): https://commits.webkit.org/279027@main

Reviewed commits have been landed. Closing PR #28735 and removing active labels.

@webkit-commit-queue webkit-commit-queue merged commit 33e3b62 into WebKit:main May 21, 2024
@webkit-commit-queue webkit-commit-queue removed the unsafe-merge-queue Applied to send a pull request to merge-queue, but skip building and testing label May 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
WebGPU For bugs in WebGPU
Projects
None yet
4 participants