New issue
Advanced search Search tips
Note: Color blocks (like or ) mean that a user may not be available. Tooltip shows the reason.

Issue 664643 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner:
Closed: Nov 2016
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: All
Pri: 1
Type: Bug

Blocking:
issue 295792
issue 639145
issue 646538



Sign in to add a comment

Bug in compressedTexImage2D/compressedTexSubImage2D taking views with offsets

Project Member Reported by kbr@chromium.org, Nov 11 2016

Issue description

jbauman@ found in https://bugs.chromium.org/p/chromium/issues/detail?id=646538#c1 that WebglConformance_conformance2_misc_views_with_offsets is failing on the Mac ASAN bot with an apparently real out-of-bounds read. This needs to be investigated and fixed.

 

Comment 1 by kbr@chromium.org, Nov 11 2016

Status: Available (was: Untriaged)

Comment 2 by kbr@chromium.org, Nov 11 2016

Blocking: 646538

Comment 3 by zmo@chromium.org, Nov 14 2016

Owner: zmo@chromium.org
Status: Assigned (was: Available)
Project Member

Comment 4 by bugdroid1@chromium.org, Nov 15 2016

The following revision refers to this bug:
  https://chromium.googlesource.com/chromium/src.git/+/1fa298aceb14ff8370addedf502c9fdf7a6f3a1f

commit 1fa298aceb14ff8370addedf502c9fdf7a6f3a1f
Author: zmo <zmo@chromium.org>
Date: Tue Nov 15 03:35:29 2016

Fix a minor bug in compressedTex{Sub}Image in blink.

The issue is in error case, we should return early instead of calling into
lower level APIs. Otherwise out-of-bounds visits happen.

BUG= 664643 
TEST=asan build with views-with-offsets.html
R=kbr@chromium.org
CQ_INCLUDE_TRYBOTS=master.tryserver.chromium.linux:linux_optional_gpu_tests_rel;master.tryserver.chromium.mac:mac_optional_gpu_tests_rel;master.tryserver.chromium.win:win_optional_gpu_tests_rel

Review-Url: https://codereview.chromium.org/2501243002
Cr-Commit-Position: refs/heads/master@{#432072}

[modify] https://crrev.com/1fa298aceb14ff8370addedf502c9fdf7a6f3a1f/third_party/WebKit/Source/modules/webgl/WebGL2RenderingContextBase.cpp

Comment 5 by zmo@chromium.org, Nov 15 2016

Status: Fixed (was: Assigned)

Sign in to add a comment