)]}'
{
  "commit": "72412ccca6e6807c78bb375363424eb10fbd2dfc",
  "tree": "af8cf715dec4f58121f6c533261d1a4fd5634606",
  "parents": [
    "eab71cf4fc10f79abddcf35f21b3d60852133bb1"
  ],
  "author": {
    "name": "Kai Ninomiya",
    "email": "kainino@chromium.org",
    "time": "Tue May 13 17:42:42 2025 -0700"
  },
  "committer": {
    "name": "Dawn LUCI CQ",
    "email": "dawn-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue May 13 17:42:42 2025 -0700"
  },
  "message": "[wire] Reject mappedAtCreation in CreateErrorBuffer\n\nThe wire client already blocks mappedAtCreation in CreateErrorBuffer,\nbecause it\u0027s complicated to implement but has no existing use case.\n\nThus, block it in the wire server too (with a WireResult::FatalError) to\nprevent fuzzers from finding crashes due to the native CreateErrorBuffer\nreturning nullptr (because it OOMed during map-at-creation).\n\nThis fixes all three fuzzer cases associated with the bugs below.\n\nNo tests added because (AFAICT) there are no tests that can provide\ncustom input to the wire server (without using the wire client).\n\nFixed: 406043685, 415199303, 406804858\nChange-Id: If4dd76d49283be9d28924a95e81c85c770fae293\nReviewed-on: https://dawn-review.googlesource.com/c/dawn/+/241935\nCommit-Queue: Kai Ninomiya \u003ckainino@chromium.org\u003e\nReviewed-by: Loko Kung \u003clokokung@google.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "aeceb9bf23428bc18be2758d2cf6e9f0ad521915",
      "old_mode": 33188,
      "old_path": "src/dawn/dawn_wire.json",
      "new_id": "1706cb2dabfd145abb4a068a76f1dae890138fa7",
      "new_mode": 33188,
      "new_path": "src/dawn/dawn_wire.json"
    },
    {
      "type": "modify",
      "old_id": "c802221c1bf7e22996165e2d0ce9508bd2ca2487",
      "old_mode": 33188,
      "old_path": "src/dawn/wire/server/ServerBuffer.cpp",
      "new_id": "0e61d4c7851590de37344957875761941cd30b13",
      "new_mode": 33188,
      "new_path": "src/dawn/wire/server/ServerBuffer.cpp"
    }
  ]
}
