Nested loop in WebGL shader crashes the tab (windows only) with webgl.bypass-shader-validation:true
Categories
(Core :: Graphics: CanvasWebGL, defect, P3)
Tracking
()
People
(Reporter: matthieu.rudelle, Unassigned)
References
Details
Crash Data
User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36
Steps to reproduce:
Visit https://jsfiddle.net/mrudelle/5ve9fscx/ from a windows machine.
Tested on a Microsoft Surface and A desktop computer.
Actual results:
The tab crashes
Expected results:
A canvas showing animated colors should be displayed.
Reporter | ||
Comment 1•5 years ago
|
||
Actual User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0
Comment 2•5 years ago
|
||
Hello Matthieu - Can you please type about:crashes in the URL bar and provide the crash report ID? Thanks!
Reporter | ||
Comment 3•5 years ago
|
||
Hi Marcia, thanks for the quick reply! Here is the crash report ID: bp-cd551227-8a4f-4376-84d3-bc6d20190604
Comment 4•5 years ago
|
||
Matthieu - It looks as if this is Bug 1526027, which is fixed in 68 but I guess not in 67.
Updated•5 years ago
|
Comment 5•5 years ago
|
||
What's the value of "webgl.bypass-shader-validation" in about:support?
Updated•5 years ago
|
Updated•5 years ago
|
Updated•5 years ago
|
Updated•5 years ago
|
Comment 6•5 years ago
•
|
||
:sylvestre, why do we even have an "ASSIGNED" state if we're enforcing ASSIGNED if assignee != null?
Updated•5 years ago
|
Reporter | ||
Comment 8•5 years ago
|
||
:marcia You are probably right, I tried under nightly (69.0a1) and the page works as expected
:jgilbert webgl.bypass-shader-validation is set to true
Comment 9•5 years ago
|
||
Disable that ASAP, as it opens you up to vulnerabilities on malicious websites.
Description
•