)]}'
{
  "commit": "7e23399c7cb679d4009749d11e4e0e10025bb0b7",
  "tree": "776f73f1e6e8801df9341cee08163405a2ec9c8d",
  "parents": [
    "70af33be7c3e848f7f4ab82169852e753ae2a8e3"
  ],
  "author": {
    "name": "Lokbondo Kung",
    "email": "lokokung@google.com",
    "time": "Tue Aug 18 04:56:57 2026 -0700"
  },
  "committer": {
    "name": "dawn-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "email": "dawn-scoped@luci-project-accounts.iam.gserviceaccount.com",
    "time": "Tue Aug 18 04:56:57 2026 -0700"
  },
  "message": "[wire] Bandaid fix to avoid TOCTOU vulnerability in Dawn wire.\n\n- This change ensures that for the non-commands in Dawn wire\n  client, which haven\u0027t been completely spanified yet, do not\n  read the size of spans more than once, and instead use a\n  consistent read value.\n- This is a bandaid fix for now, and should be more properly\n  addressed in follow ups where the remainder of the commands\n  on the wire are spanified.\n\nBug: 544157274\nChange-Id: Ie36b7f831664d13b4d68d4decdd778fb75471fba\nReviewed-on: https://dawn-review.googlesource.com/c/dawn/+/333175\nCommit-Queue: Corentin Wallez \u003ccwallez@chromium.org\u003e\nAuto-Submit: Loko Kung \u003clokokung@google.com\u003e\nReviewed-by: Corentin Wallez \u003ccwallez@chromium.org\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "043b0f0325787cedd06598b209d3a565ad54884b",
      "old_mode": 33188,
      "old_path": "generator/templates/dawn/wire/WireCmd.cpp",
      "new_id": "25bfd1244059158fffdaa0096476f9a19c4ebfcd",
      "new_mode": 33188,
      "new_path": "generator/templates/dawn/wire/WireCmd.cpp"
    }
  ]
}