Platform/GFX/WebGL-Security-2011-10-28: Difference between revisions

Platform/GFX/WebGL-Security-2011-10-28 (view source)

988 bytes added , 28 October 2011

no edit summary

canmove, Confirmed users, Bureaucrats and Sysops emeriti

2,776

edits

@@ Line 19: / Line 19: @@
 *** June 29 review: {{Bug|648705}} in our WebGL implementation; {{Bug|665934}} in ANGLE.
 *** October 28 review: {{Bug|686398}}, {{Bug|685793}}, {{Bug|682335}} in our WebGL implementation; {{Bug|680840}}, {{Bug|665936}} in ANGLE.
+== Securtiy Discussion ==
+* go over action items from previous meeting and evaluate progress
+** conformance tests should be in a very good shape now: https://etherpad.mozilla.org/WebGL-Conf
+** ARB_robustness support finally landing (GLX already landed, WGL has patch)
+* go over security bugs we've had since previous meeting and see how they fit in the patterns we discussed.
+* regarding the DOS issue, discuss whether the pace of progress around ARB_robustness is enough or we want to do more.
+** things seem to be progressing positively at this point
+* discuss state of fuzzing
+** still need to make a push to integrate fuzzcases as tests.
+** If conformance tests revealed some bugs, does it make sense to mutate conformance tests?
+** Does it make sense to do this without a real driver (software rendering)?
+*** Recent versions of MESA (7.11) with the llvmpipe driver (or softpipe) but avoid the old 'swrast' driver
+* performance tests
+** https://etherpad.mozilla.org/WebGL-Conf