)]}'
{
  "commit": "50c9f7b4ee3fef0bdc9166056098271ea85ef9fc",
  "tree": "dab1759c45a13791646d85e46c28c53cb2436591",
  "parents": [
    "95074a12bdf7fdb97b935f93100a8bd0b58773c2"
  ],
  "author": {
    "name": "Lokbondo Kung",
    "email": "lokokung@google.com",
    "time": "Mon Aug 24 18:34:20 2026 -0700"
  },
  "committer": {
    "name": "Kai Ninomiya",
    "email": "kainino@chromium.org",
    "time": "Mon Aug 24 18:34:20 2026 -0700"
  },
  "message": "[M153] [vulkan] Add workaround for UAF in DestroyDescriptorPool.\n\nOriginal change\u0027s description:\n\u003e [vulkan] Add workaround for UAF in DestroyDescriptorPool.\n\u003e\n\u003e - As per the bug and the related internal Android issue,\n\u003e   this works around a temporary issue in the IMG driver\n\u003e   that causes a UAF when we attempt to call\n\u003e   AllocateDescriptorSets and run into an OOM.\n\u003e - The more \"proper\" fix would probably be to implement\n\u003e   suballocations, but since that is a much larger effort,\n\u003e   this is a band-aid fix to avoid the UAF issue for now.\n\u003e - Note that since the error that is generated is an\n\u003e   internal error, this eventually leads to a device loss\n\u003e   so it is acceptable to skip the Destroy call in this\n\u003e   case since even if it would lead to a leak, it cannot\n\u003e   propagate further.\n\u003e\n\u003e Bug: 549311485\n\u003e Change-Id: I8c951e879bb405943698c179962275687e828168\n\u003e Reviewed-on: https://dawn-review.googlesource.com/c/dawn/+/334695\n\u003e Reviewed-by: Kai Ninomiya \u003ckainino@chromium.org\u003e\n\u003e Commit-Queue: Loko Kung \u003clokokung@google.com\u003e\n\n(cherry picked from commit daa0cc047acd570fbd5c127db4262e1a98637eb7)\n\nBug: 551226481,549311485\nChange-Id: I8c951e879bb405943698c179962275687e828168\nReviewed-on: https://dawn-review.googlesource.com/c/dawn/+/335576\nBot-Commit: rubber-stamper@appspot.gserviceaccount.com \u003crubber-stamper@appspot.gserviceaccount.com\u003e\nAuto-Submit: Chrome Cherry Picker \u003cchrome-cherry-picker@chops-service-accounts.iam.gserviceaccount.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ed365828e402e9df34f1befe8215ff9443f64620",
      "old_mode": 33188,
      "old_path": "src/dawn/native/vulkan/DescriptorSetAllocator.cpp",
      "new_id": "d14b23eedf635bada32f7b8f017b48eed69a2007",
      "new_mode": 33188,
      "new_path": "src/dawn/native/vulkan/DescriptorSetAllocator.cpp"
    }
  ]
}