Google Git
Sign in
dawn/dawn/72412ccca6e6807c78bb375363424eb10fbd2dfc
commit
72412ccca6e6807c78bb375363424eb10fbd2dfc
[log] [tgz]
author
Kai Ninomiya <kainino@chromium.org>
Tue May 13 17:42:42 2025 -0700
committer
Dawn LUCI CQ <dawn-scoped@luci-project-accounts.iam.gserviceaccount.com>
Tue May 13 17:42:42 2025 -0700
tree
af8cf715dec4f58121f6c533261d1a4fd5634606
parent
eab71cf4fc10f79abddcf35f21b3d60852133bb1 [diff]
[wire] Reject mappedAtCreation in CreateErrorBuffer

The wire client already blocks mappedAtCreation in CreateErrorBuffer,
because it's complicated to implement but has no existing use case.

Thus, block it in the wire server too (with a WireResult::FatalError) to
prevent fuzzers from finding crashes due to the native CreateErrorBuffer
returning nullptr (because it OOMed during map-at-creation).

This fixes all three fuzzer cases associated with the bugs below.

No tests added because (AFAICT) there are no tests that can provide
custom input to the wire server (without using the wire client).

Fixed: 406043685, 415199303, 406804858
Change-Id: If4dd76d49283be9d28924a95e81c85c770fae293
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/241935
Commit-Queue: Kai Ninomiya <kainino@chromium.org>
Reviewed-by: Loko Kung <lokokung@google.com>
2 files changed
tree: af8cf715dec4f58121f6c533261d1a4fd5634606
  1. .github/
  2. .vscode/
  3. build_overrides/
  4. docs/
  5. generator/
  6. include/
  7. infra/
  8. scripts/
  9. src/
  10. test/
  11. third_party/
  12. tools/
  13. webgpu-cts/
  14. build
  15. buildtools
  16. testing
  17. .bazelrc
  18. .clang-format
  19. .clang-format-ignore
  20. .clang-tidy
  21. .git-blame-ignore-revs
  22. .gitattributes
  23. .gitignore
  24. .gitmodules
  25. .gn
  26. .style.yapf
  27. .vpython3
  28. AUTHORS
  29. BUILD.bazel
  30. BUILD.gn
  31. CMakeLists.txt
  32. CMakeSettings.json
  33. CODE_OF_CONDUCT.md
  34. codereview.settings
  35. CONTRIBUTING.md
  36. CPPLINT.cfg
  37. DEPS
  38. DIR_METADATA
  39. go.mod
  40. go.sum
  41. go_presubmit_support.py
  42. LICENSE
  43. OWNERS
  44. PRESUBMIT.py
  45. README.chromium
  46. README.md
  47. WATCHLISTS
  48. WORKSPACE.bazel
README.md

Build Status Matrix Space

Dawn, a WebGPU implementation

Dawn is an open-source and cross-platform implementation of the WebGPU standard. More precisely it implements webgpu.h that is a one-to-one mapping with the WebGPU IDL. Dawn is meant to be integrated as part of a larger system and is the underlying implementation of WebGPU in Chromium.

Dawn provides several WebGPU building blocks:

  • WebGPU C/C++ headers that applications and other building blocks use.
    • The webgpu.h version that Dawn implements.
    • A C++ wrapper for the webgpu.h.
  • A “native” implementation of WebGPU using platforms' GPU APIs: D3D12, Metal, Vulkan and OpenGL. See per API support for more details.
  • A client-server implementation of WebGPU for applications that are in a sandbox without access to native drivers
  • Tint is a compiler for the WebGPU Shader Language (WGSL) that can be used in standalone to convert shaders from and to WGSL.

Helpful links:

Documentation table of content

Developer documentation:

User documentation: (TODO, figure out what overlaps with the webgpu.h docs)

License

BSD 3-Clause License, please see LICENSE.

Disclaimer

This is not an officially supported Google product.