Closed Bug 661283 Opened 13 years ago Closed 13 years ago

WebGL errors reveal application path (update ANGLE to r751)

Categories

(Core :: Graphics: CanvasWebGL, defect)

Product:
Core
Component:
Graphics: CanvasWebGL
Platform:
x86_64
Linux
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
RESOLVED FIXED

People

(Reporter: bjacob, Unassigned)

References

Details

(Whiteboard: [sg:low]) 

Copying the contents of ANGLE bug 162. It's been patched, as r662.

http://code.google.com/p/angleproject/issues/detail?id=162

This is a security bug reported on the chromium issue tracker and the fix needs to be patched in to our upcoming release. 

If a shader fails to compile, glGetProgramInfoLog reports errors that include a full path to the chrome install directory including possibly the username on the account. For example:

C:\Users\[username]\AppData\Local\Google\Chrome SxS\Application\13.0.774.0\Shader@0x05A7BD80(182,17): warning X3206: implicit truncation of vector type

Chrome bug: 
http://code.google.com/p/chromium/issues/detail?id=83841
(access list is restricted)
Summary: Update ANGLE to r662 or newer to pick up a security fix → WebGL errors reveal application path (update ANGLE to r662)
Whiteboard: [sg:low]
Depends on: 663162
An update to ANGLE r686 is ready in bug 663162.
Fixed in central, we may want to backport this to aurora.
Any reason not to close this now?
It's really fixed in Firefox 10, by ANGLE r751. In comment 1 I said ANGLE r662 but that later turned out to still leave the bug open.
Status: NEW → RESOLVED
Closed: 13 years ago
Resolution: --- → FIXED
Summary: WebGL errors reveal application path (update ANGLE to r662) → WebGL errors reveal application path (update ANGLE to r751)
Group: core-security → core-security-release
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.