I think the only argument against this is that the pixman code might not be safe against timing attacks. But if that's the case then we're already vulnerable through more common uses of the code, e.g. through normal web page compositing.
Summary: Consider replacing the FilterNodeCompositeSoftware code with pixman compositing through DrawTargetCairo → Consider replacing the FilterNodeCompositeSoftware code with Skia compositing through DrawTargetSkia
How about timing attacks with Skia?
Comment on attachment 8498664 [details] [diff] [review] v2 Right, I still need to check that.
Markus, any update on this? Could you unbitrot your patch?
No update, but sure, I can update it. As for the timing attacks, it's unlikely that Skia is vulnerable to them. Since we're using Skia composition for content drawing on some platforms now (and so is Chrome), we'd be vulnerable already.
For the record: This patch will probably not improve the performance of the feComposite filter on desktop. Last I checked, the SSE2 code I wrote was roughly competitive with Skia. I did not write a NEON version of the composite filter, but Skia has NEON versions for this, so this patch will definitely improve performance on Android.
You need to log in before you can comment on or make changes to this bug.