[Mesa-dev] [Bug 91889] Planetary Anihilation: Titans display content of other processes buffers

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=91889

--- Comment #23 from Eirik Byrkjeflot Anonsen <eirik at eirikba.org> ---
(In reply to almos from comment #22)
> (In reply to Eirik Byrkjeflot Anonsen from comment #21)
> > > No matter what they shouldn't be able to get that data. I'm starting to
> > > think if it's possible to grab that data with OpenGL would it be also
> > > possible with WebGL...
> > 
> > It should not be possible with WebGL. One of the things that delayed WebGL's
> > general availability was that the specification required that all data shall
> > be initialized. This was explicitly mentioned as being a difference from
> > other OpenGL specifications due to the different threat models.
> 
> Well, this bug might be an indication that Mesa doesn't initialize all data.

Mesa is an OpenGL implementation, not a WebGL implementation, so there is
nothing wrong with that.

That is, there is nothing in the OpenGL specifications (as far as I know) that
says Mesa is doing something wrong. Arguably, this is based on an outdated
threat model where local applications are trusted. A more modern understanding
of local application security would probably indicate that the threat model
should be changed to protect against such information leaks.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/mesa-dev/attachments/20150914/a3d47017/attachment.html>