[Bug 71574] New: Long expressions in shaders crash Mesa

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=71574

          Priority: medium
            Bug ID: 71574
          Assignee: idr at freedesktop.org
           Summary: Long expressions in shaders crash Mesa
        QA Contact: intel-3d-bugs at lists.freedesktop.org
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: kevin.rogovin at intel.com
          Hardware: Other
            Status: NEW
           Version: 9.1
         Component: Drivers/DRI/i965
           Product: Mesa

Created attachment 89137
  --> https://bugs.freedesktop.org/attachment.cgi?id=89137&action=edit
vertex shader

A long expression in a GLSL shader will crash Mesa, the crash occurs after
parsing in generating the HIR from the AST.

Attached is a vertex shader with such a long expression (10,000 add terms).

The bug issue is that although such a shader is not to be found in "real"
applications, a malicious website can use WebGL to crash Mesa which would
likely crash the browser.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/intel-3d-bugs/attachments/20131113/52293a8a/attachment.html>