Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: c9e6d14f219eb6f50c535d538bda3fb20aec8da5
https://github.com/WebKit/WebKit/commit/c9e6d14f219eb6f50c535d538bda3fb20aec8da5
Author: Mike Wyrzykowski <mwyrzykow...@apple.com>
Date: 2025-01-20 (Mon, 20 Jan 2025)
Changed paths:
A LayoutTests/fast/webgpu/nocrash/fuzz-286041-expected.txt
A LayoutTests/fast/webgpu/nocrash/fuzz-286041.html
M Source/WebGPU/WebGPU/BindGroupLayout.mm
Log Message:
-----------
[WebGPU] Sometimes array length is missing from the generated argument
buffer, leading to buffer size mismatches
https://bugs.webkit.org/show_bug.cgi?id=286041
rdar://142937923
Reviewed by Tadeu Zagallo.
A binding which happened to map to the same metal binding in two different
shader stages could get its array length overwritten because slotForEntry
was used across stages, which is incorrect. Instead, track array lengths
per metal binding per stage, which avoids the slot being overwritten.
* LayoutTests/fast/webgpu/nocrash/fuzz-286041-expected.txt: Added.
* LayoutTests/fast/webgpu/nocrash/fuzz-286041.html: Added.
Add regression test.
* Source/WebGPU/WebGPU/BindGroupLayout.mm:
(WebGPU::Device::createBindGroupLayout):
Track array lengths per stage.
Canonical link: https://commits.webkit.org/289161@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
_______________________________________________
webkit-changes mailing list
webkit-changes@lists.webkit.org
https://lists.webkit.org/mailman/listinfo/webkit-changes
