A WebGPU implementation translates the workloads issued by the user into API commands specific to the target platform. Native APIs specify the valid usage for the commands (for example, see vkCreateDescriptorSetLayout) and generally don’t guarantee any outcome if the valid usage rules are not followed. This is called "undefined behavior", and it can be exploited by an attacker to access memory they don’t own, or force the driver to execute arbitrary code.
# What could go wrong?
Posté par devnewton 🍺 (site web personnel) . En réponse au lien A Taste of WebGPU in Firefox (exemple de rendu avec Vulkan sur GNU/Linux à l'appui). Évalué à 3.
A WebGPU implementation translates the workloads issued by the user into API commands specific to the target platform. Native APIs specify the valid usage for the commands (for example, see vkCreateDescriptorSetLayout) and generally don’t guarantee any outcome if the valid usage rules are not followed. This is called "undefined behavior", and it can be exploited by an attacker to access memory they don’t own, or force the driver to execute arbitrary code.
https://gpuweb.github.io/gpuweb/
Ce post est offensant ? Prévenez moi sur https://linuxfr.org/board