Bug 252603 - [WebGPU] GPUBuffer::getMappedRange will attempt to copy from nullptr if mapping fails
Summary: [WebGPU] GPUBuffer::getMappedRange will attempt to copy from nullptr if mappi...
Status: RESOLVED FIXED
Alias: None
Product: WebKit
Classification: Unclassified
Component: WebGPU (show other bugs)
Version: WebKit Nightly Build
Hardware: Unspecified Unspecified
: P2 Normal
Assignee: Nobody
URL:
Keywords: InRadar
Depends on:
Blocks:
 
Reported: 2023-02-20 12:58 PST by Mike Wyrzykowski
Modified: 2023-03-12 17:18 PDT (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Mike Wyrzykowski 2023-02-20 12:58:08 PST 
[WebGPU] GPUBuffer::getMappedRange will attempt to copy from nullptr if mapping fails

If mapping fails in the GPU process, then m_mappedRange.source is nullptr and we will attempt to perform a memcpy with a src address of 0
Comment 1 Radar WebKit Bug Importer 2023-02-20 13:00:50 PST 
<rdar://problem/105692446>
Comment 2 Mike Wyrzykowski 2023-02-20 14:27:15 PST 
Pull request: https://github.com/WebKit/WebKit/pull/10396
Comment 3 EWS 2023-03-12 17:18:52 PDT 
Committed 261555@main (fee8a92ad0b7): <https://commits.webkit.org/261555@main>

Reviewed commits have been landed. Closing PR #10396 and removing active labels.