encounter
/
dawn-cmake
mirror of https://github.com/encounter/dawn-cmake.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
dawn-cmake/test/tint
History
Ben Clayton c33d10ae79 tint/resolver: Fix bad pointer deref (UAF) 
Passing a dereferenced value from Hashmap::Find() directly into Hashmap::Add() is a potential cause of UAF, as the insertion may reallocate the map, invalidating the input reference.

I'll try to think of ways to make this foot-gun harder to do, but this CL fixes the immediate bug found by fuzzers.

Bug: chromium:1383755
Change-Id: I4f8b2fcb0745b008a47ef9947c330afb9ac4e78f
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/110020
Kokoro: Kokoro <noreply+kokoro@google.com>
Reviewed-by: James Price <jrprice@google.com>
Commit-Queue: Ben Clayton <bclayton@google.com>
 		2022-11-13 18:26:25 +00:00
..
access tint/test-runner: Split expectations for FXC and DXC 2022-07-22 17:43:27 +00:00
array Tint/transform: make AddBlockAttribute always do wrapping if possible 2022-11-02 02:25:38 +00:00
benchmark Make reserved words an error. 2022-11-07 16:15:55 +00:00
buffer Tint/transform: make AddBlockAttribute always do wrapping if possible 2022-11-02 02:25:38 +00:00
bug tint/resolver: Fix bad pointer deref (UAF) 2022-11-13 18:26:25 +00:00
builtins Add const-eval for `tan` and `tanh` 2022-11-10 15:55:00 +00:00
const tint/test-runner: Split expectations for FXC and DXC 2022-07-22 17:43:27 +00:00
expressions tint/transform: Implement div / mod polyfill 2022-11-09 22:04:11 +00:00
extensions/parsing wgsl: Print abstract-floats with full precision. 2022-10-12 19:13:38 +00:00
identifiers/underscore tint: remove LoopToForLoop and FoldTrivialSingleUseLets transforms for HLSL and GLSL 2022-09-19 14:05:21 +00:00
layout/storage/mat2x2 Tint/transform: make AddBlockAttribute always do wrapping if possible 2022-11-02 02:25:38 +00:00
let/inferred When emitting a MSL struct initializer emit the struct name. 2022-08-11 02:28:01 +00:00
loops tint: Use MergeReturn transform in SPIR-V backend 2022-10-31 15:41:41 +00:00
out_of_order_decls When emitting a MSL struct initializer emit the struct name. 2022-08-11 02:28:01 +00:00
ptr_ref Tint/transform: make AddBlockAttribute always do wrapping if possible 2022-11-02 02:25:38 +00:00
samples Tint/transform: make AddBlockAttribute always do wrapping if possible 2022-11-02 02:25:38 +00:00
shader_io wgsl: Print abstract-floats with full precision. 2022-10-12 19:13:38 +00:00
shadowing tint: remove LoopToForLoop and FoldTrivialSingleUseLets transforms for HLSL and GLSL 2022-09-19 14:05:21 +00:00
statements tint/transform: Implement div / mod polyfill 2022-11-09 22:04:11 +00:00
struct Update internals to initializer instead of constructor. 2022-10-20 13:38:28 +00:00
types When emitting a MSL struct initializer emit the struct name. 2022-08-11 02:28:01 +00:00
unicode tint/test-runner: Split expectations for FXC and DXC 2022-07-22 17:43:27 +00:00
unittest/reader/spirv tint: Use "demote-to-helper" semantics for discard 2022-11-09 19:58:59 +00:00
var Rename StorageClass to AddressSpace. 2022-10-03 14:05:23 +00:00
vk-gl-cts tint: Use "demote-to-helper" semantics for discard 2022-11-09 19:58:59 +00:00
extract-spvasm.py tint->dawn: Shuffle source tree in preperation of merging repos 2022-02-21 15:19:07 +00:00
parse_hlsl_errors.py tint: add parse_hlsl_errors.py to help triage hlsl errors 2022-10-04 19:48:41 +00:00
test-all.sh tools: Replace copy-pasta scripts 2022-04-07 18:26:45 +00:00