Google Git
Sign in
dawn/dawn/refs/heads/chromium/8010
commit
50c9f7b4ee3fef0bdc9166056098271ea85ef9fc
[log]
author
Lokbondo Kung <lokokung@google.com>
Mon Aug 24 18:34:20 2026 -0700
committer
Kai Ninomiya <kainino@chromium.org>
Mon Aug 24 18:34:20 2026 -0700
tree
dab1759c45a13791646d85e46c28c53cb2436591
parent
95074a12bdf7fdb97b935f93100a8bd0b58773c2 [diff]
[M153] [vulkan] Add workaround for UAF in DestroyDescriptorPool.

Original change's description:
> [vulkan] Add workaround for UAF in DestroyDescriptorPool.
>
> - As per the bug and the related internal Android issue,
>   this works around a temporary issue in the IMG driver
>   that causes a UAF when we attempt to call
>   AllocateDescriptorSets and run into an OOM.
> - The more "proper" fix would probably be to implement
>   suballocations, but since that is a much larger effort,
>   this is a band-aid fix to avoid the UAF issue for now.
> - Note that since the error that is generated is an
>   internal error, this eventually leads to a device loss
>   so it is acceptable to skip the Destroy call in this
>   case since even if it would lead to a leak, it cannot
>   propagate further.
>
> Bug: 549311485
> Change-Id: I8c951e879bb405943698c179962275687e828168
> Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/334695
> Reviewed-by: Kai Ninomiya <kainino@chromium.org>
> Commit-Queue: Loko Kung <lokokung@google.com>

(cherry picked from commit daa0cc047acd570fbd5c127db4262e1a98637eb7)

Bug: 551226481,549311485
Change-Id: I8c951e879bb405943698c179962275687e828168
Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/335576
Bot-Commit: rubber-stamper@appspot.gserviceaccount.com <rubber-stamper@appspot.gserviceaccount.com>
Auto-Submit: Chrome Cherry Picker <chrome-cherry-picker@chops-service-accounts.iam.gserviceaccount.com>
1 file changed
tree: dab1759c45a13791646d85e46c28c53cb2436591
  1. .github/
  2. .vscode/
  3. agents/
  4. build_overrides/
  5. docs/
  6. generator/
  7. include/
  8. infra/
  9. scripts/
  10. src/
  11. test/
  12. third_party/
  13. tools/
  14. webgpu-cts/
  15. build
  16. buildtools
  17. testing
  18. .bazelignore
  19. .bazelrc
  20. .bazelversion
  21. .clang-format
  22. .clang-format-ignore
  23. .clang-tidy
  24. .git-blame-ignore-revs
  25. .gitattributes
  26. .gitignore
  27. .gitmodules
  28. .gn
  29. .style.yapf
  30. .vpython3
  31. AUTHORS
  32. BUILD.bazel
  33. BUILD.gn
  34. CMakeLists.txt
  35. CMakeSettings.json
  36. CODE_OF_CONDUCT.md
  37. codereview.settings
  38. CONTRIBUTING.md
  39. CPPLINT.cfg
  40. DEPS
  41. DIR_METADATA
  42. go.mod
  43. go.sum
  44. go_presubmit_support.py
  45. LICENSE
  46. MODULE.bazel
  47. MODULE.bazel.lock
  48. OWNERS
  49. PRESUBMIT.py
  50. PRESUBMIT_test.py
  51. README.chromium
  52. README.md
  53. unsafe_buffers_paths.txt
  54. WATCHLISTS
  55. WORKSPACE.bazel
README.md

Build Status Matrix Space

Dawn, a WebGPU implementation

Dawn is an open-source and cross-platform implementation of the WebGPU standard. More precisely it implements webgpu.h that is a one-to-one mapping with the WebGPU IDL. Dawn is meant to be integrated as part of a larger system and is the underlying implementation of WebGPU in Chromium.

Dawn provides several WebGPU building blocks:

  • WebGPU C/C++ headers that applications and other building blocks use.
    • The webgpu.h version that Dawn implements.
    • A C++ wrapper for the webgpu.h.
  • A “native” implementation of WebGPU using platforms' GPU APIs: D3D12, Metal, Vulkan and OpenGL. See per API support for more details.
  • A client-server implementation of WebGPU for applications that are in a sandbox without access to native drivers
  • Tint is a compiler for the WebGPU Shader Language (WGSL) that can be used in standalone to convert shaders from and to WGSL.

Helpful links:

Documentation table of content

Developer documentation:

User documentation: (TODO, figure out what overlaps with the webgpu.h docs)

License

BSD 3-Clause License, please see LICENSE.

Disclaimer

This is not an officially supported Google product.