The test does this: 1. Context 1: Read Texture 1 and draw into Framebuffer 1 2. Context 2: Read Texture 1 and draw into Framebuffer 2 3. Context 1: Delete Framebuffer 1 4. Context 1: Flush 5. Context 2: Modify Texture 1 Issue is Texture 1's mCurrentReadingNodes contains one node from each context's command graph, one of which is deleted at step 4. At step 5, a dependency is added from both nodes (one already deleted) to a new node, causing use-after-free. Bug: angleproject:4130 Change-Id: I06720aec20d0b49114937f1cd9b193a4f1df9d8d Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/1924790Reviewed-by:Geoff Lang <geofflang@chromium.org> Commit-Queue: Shahbaz Youssefi <syoussefi@chromium.org>
| Name |
Last commit
|
Last update |
|---|---|---|
| .. | ||
| android | Loading commit data... | |
| fuchsia | Loading commit data... | |
| osx | Loading commit data... | |
| ozone | Loading commit data... | |
| posix | Loading commit data... | |
| windows | Loading commit data... | |
| x11 | Loading commit data... | |
| EGLPlatformParameters.h | Loading commit data... | |
| EGLWindow.cpp | Loading commit data... | |
| EGLWindow.h | Loading commit data... | |
| Event.h | Loading commit data... | |
| Matrix.cpp | Loading commit data... | |
| Matrix.h | Loading commit data... | |
| OSPixmap.h | Loading commit data... | |
| OSWindow.cpp | Loading commit data... | |
| OSWindow.h | Loading commit data... | |
| Timer.cpp | Loading commit data... | |
| Timer.h | Loading commit data... | |
| com_utils.h | Loading commit data... | |
| egl_loader_autogen.cpp | Loading commit data... | |
| egl_loader_autogen.h | Loading commit data... | |
| geometry_utils.cpp | Loading commit data... | |
| geometry_utils.h | Loading commit data... | |
| gles_loader_autogen.cpp | Loading commit data... | |
| gles_loader_autogen.h | Loading commit data... | |
| keyboard.h | Loading commit data... | |
| mouse.h | Loading commit data... | |
| random_utils.cpp | Loading commit data... | |
| random_utils.h | Loading commit data... | |
| shader_utils.cpp | Loading commit data... | |
| shader_utils.h | Loading commit data... | |
| test_utils.cpp | Loading commit data... | |
| test_utils.h | Loading commit data... | |
| test_utils_unittest.cpp | Loading commit data... | |
| test_utils_unittest_helper.cpp | Loading commit data... | |
| test_utils_unittest_helper.h | Loading commit data... | |
| util.gni | Loading commit data... | |
| util_export.h | Loading commit data... | |
| util_gl.h | Loading commit data... |