dawn-cmake/test/tint/bug/chromium/1383755.wgsl.expected.glsl
Ben Clayton c33d10ae79 tint/resolver: Fix bad pointer deref (UAF)
Passing a dereferenced value from Hashmap::Find() directly into Hashmap::Add() is a potential cause of UAF, as the insertion may reallocate the map, invalidating the input reference.

I'll try to think of ways to make this foot-gun harder to do, but this CL fixes the immediate bug found by fuzzers.

Bug: chromium:1383755
Change-Id: I4f8b2fcb0745b008a47ef9947c330afb9ac4e78f
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/110020
Kokoro: Kokoro <noreply+kokoro@google.com>
Reviewed-by: James Price <jrprice@google.com>
Commit-Queue: Ben Clayton <bclayton@google.com>
2022-11-13 18:26:25 +00:00

42 lines
751 B
GLSL

#version 310 es
layout(local_size_x = 1, local_size_y = 1, local_size_z = 1) in;
void unused_entry_point() {
return;
}
struct TestDatabuMltin {
int functionatxa4[9];
int data[32772];
int a[4];
int dzet4rnaumtax2at[1];
};
struct Tc65535tDtint_symbol_7ata {
int dtma1atxa4[72365];
int hata[2];
int a[3];
int returnma3tatxa92233720368547R758p8[35526];
};
struct TzVfat0x32769tDvar {
int dmat2axat2[39611];
};
struct TestDauiltin {
int dmat2a2axt[9];
int data[32742];
int a[4];
};
struct Teec65538tDtint_sybom_l7ata {
int dmat1atxainverseSqrt4[32768];
int hata[2];
int a[5];
int dreturnmc4tax2at[1];
};
struct TzfVatt0x0UDatasmvec65535tDtinvec4matomicMaxbol_fVatt0atomicMin3D9t672var {
int dmat2axat1[39711];
};