Fix unsafe buffer usage in StringView [chromium/src : main]

0 views
Skip to first unread message

Michael Lippautz (Gerrit)

unread,
May 4, 2026, 6:30:31 PM (14 hours ago) May 4
to Xiang Ji, Chromium LUCI CQ, chromium...@chromium.org, blink-re...@chromium.org, blink-...@chromium.org, kinuko...@chromium.org
Attention needed from Xiang Ji

Michael Lippautz added 1 comment

Patchset-level comments
File-level comment, Patchset 1 (Latest):
Michael Lippautz . resolved

These seem like performance sensitive paths in here. Was there any analysis done on how this impacts performance of e.g. Speedometer?

Open in Gerrit

Related details

Attention is currently required from:
  • Xiang Ji
Submit Requirements:
  • requirement satisfiedCode-Coverage
  • requirement is not satisfiedCode-Owners
  • requirement is not satisfiedCode-Review
  • requirement is not satisfiedReview-Enforcement
Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
Gerrit-MessageType: comment
Gerrit-Project: chromium/src
Gerrit-Branch: main
Gerrit-Change-Id: I9ecef257ee06bf8aed9a681cdddbf7449a5cae26
Gerrit-Change-Number: 7812250
Gerrit-PatchSet: 1
Gerrit-Owner: Xiang Ji <jxi...@google.com>
Gerrit-Reviewer: Michael Lippautz <mlip...@chromium.org>
Gerrit-Reviewer: Xiang Ji <jxi...@google.com>
Gerrit-Attention: Xiang Ji <jxi...@google.com>
Gerrit-Comment-Date: Mon, 04 May 2026 22:30:20 +0000
Gerrit-HasComments: Yes
Gerrit-Has-Labels: No
satisfied_requirement
unsatisfied_requirement
open
diffy

Xiang Ji (Gerrit)

unread,
May 4, 2026, 6:33:20 PM (14 hours ago) May 4
to Michael Lippautz, Chromium LUCI CQ, chromium...@chromium.org, blink-re...@chromium.org, blink-...@chromium.org, kinuko...@chromium.org
Attention needed from Michael Lippautz

Xiang Ji added 1 comment

Patchset-level comments
Michael Lippautz . unresolved

These seem like performance sensitive paths in here. Was there any analysis done on how this impacts performance of e.g. Speedometer?

Xiang Ji

No, how to use speedometer? Is there a try job for it?

Open in Gerrit

Related details

Attention is currently required from:
  • Michael Lippautz
Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I9ecef257ee06bf8aed9a681cdddbf7449a5cae26
    Gerrit-Change-Number: 7812250
    Gerrit-PatchSet: 1
    Gerrit-Owner: Xiang Ji <jxi...@google.com>
    Gerrit-Reviewer: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Reviewer: Xiang Ji <jxi...@google.com>
    Gerrit-Attention: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Comment-Date: Mon, 04 May 2026 22:33:07 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    Comment-In-Reply-To: Michael Lippautz <mlip...@chromium.org>
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Michael Lippautz (Gerrit)

    unread,
    May 4, 2026, 6:37:46 PM (14 hours ago) May 4
    to Xiang Ji, Chromium LUCI CQ, chromium...@chromium.org, blink-re...@chromium.org, blink-...@chromium.org, kinuko...@chromium.org
    Attention needed from Xiang Ji

    Michael Lippautz added 1 comment

    Patchset-level comments
    Michael Lippautz . unresolved

    These seem like performance sensitive paths in here. Was there any analysis done on how this impacts performance of e.g. Speedometer?

    Xiang Ji

    No, how to use speedometer? Is there a try job for it?

    Michael Lippautz

    It can be executed on pinpoint via `speedometer3.crossbench` benchmark, see https://chromium.googlesource.com/chromium/src/+/main/docs/benchmark_performance_regressions.md

    We should not blindly replace UNSAFE_TODO with AI when we are not sure that there's no critical performance impact here. `wtf/` seems not a like a good area to automate this without having any context of the codebase.

    Since this is all landed incrementally: How do we ensure that we don't destroy progress here via death of 1000 cuts?

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Xiang Ji
    Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I9ecef257ee06bf8aed9a681cdddbf7449a5cae26
    Gerrit-Change-Number: 7812250
    Gerrit-PatchSet: 1
    Gerrit-Owner: Xiang Ji <jxi...@google.com>
    Gerrit-Reviewer: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Reviewer: Xiang Ji <jxi...@google.com>
    Gerrit-Attention: Xiang Ji <jxi...@google.com>
    Gerrit-Comment-Date: Mon, 04 May 2026 22:37:34 +0000
    Gerrit-HasComments: Yes
    Gerrit-Has-Labels: No
    Comment-In-Reply-To: Xiang Ji <jxi...@google.com>
    Comment-In-Reply-To: Michael Lippautz <mlip...@chromium.org>
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Xiang Ji (Gerrit)

    unread,
    May 4, 2026, 6:53:18 PM (14 hours ago) May 4
    to Michael Lippautz, Chromium LUCI CQ, chromium...@chromium.org, blink-re...@chromium.org, blink-...@chromium.org, kinuko...@chromium.org
    Attention needed from Michael Lippautz

    Xiang Ji added 1 comment

    Patchset-level comments
    Michael Lippautz . unresolved

    These seem like performance sensitive paths in here. Was there any analysis done on how this impacts performance of e.g. Speedometer?

    Xiang Ji

    No, how to use speedometer? Is there a try job for it?

    Michael Lippautz

    It can be executed on pinpoint via `speedometer3.crossbench` benchmark, see https://chromium.googlesource.com/chromium/src/+/main/docs/benchmark_performance_regressions.md

    We should not blindly replace UNSAFE_TODO with AI when we are not sure that there's no critical performance impact here. `wtf/` seems not a like a good area to automate this without having any context of the codebase.

    Since this is all landed incrementally: How do we ensure that we don't destroy progress here via death of 1000 cuts?

    Xiang Ji

    https://pinpoint-dot-chromeperf.appspot.com/job/14857c2b890000
    https://pinpoint-dot-chromeperf.appspot.com/job/14857c2b890000
    Seems they're run in cq.

    Are span array supposed to be slower? Shall we skip blink folders entirely?

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Michael Lippautz
    Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I9ecef257ee06bf8aed9a681cdddbf7449a5cae26
    Gerrit-Change-Number: 7812250
    Gerrit-PatchSet: 1
    Gerrit-Owner: Xiang Ji <jxi...@google.com>
    Gerrit-Reviewer: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Reviewer: Xiang Ji <jxi...@google.com>
    Gerrit-Attention: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Comment-Date: Mon, 04 May 2026 22:53:09 +0000
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy

    Michael Lippautz (Gerrit)

    unread,
    7:20 AM (1 hour ago) 7:20 AM
    to Xiang Ji, Chromium LUCI CQ, chromium...@chromium.org, blink-re...@chromium.org, blink-...@chromium.org, kinuko...@chromium.org
    Attention needed from Xiang Ji

    Michael Lippautz added 1 comment

    Patchset-level comments
    Michael Lippautz . unresolved

    These seem like performance sensitive paths in here. Was there any analysis done on how this impacts performance of e.g. Speedometer?

    Xiang Ji

    No, how to use speedometer? Is there a try job for it?

    Michael Lippautz

    It can be executed on pinpoint via `speedometer3.crossbench` benchmark, see https://chromium.googlesource.com/chromium/src/+/main/docs/benchmark_performance_regressions.md

    We should not blindly replace UNSAFE_TODO with AI when we are not sure that there's no critical performance impact here. `wtf/` seems not a like a good area to automate this without having any context of the codebase.

    Since this is all landed incrementally: How do we ensure that we don't destroy progress here via death of 1000 cuts?

    Xiang Ji

    https://pinpoint-dot-chromeperf.appspot.com/job/14857c2b890000
    https://pinpoint-dot-chromeperf.appspot.com/job/14857c2b890000
    Seems they're run in cq.

    Are span array supposed to be slower? Shall we skip blink folders entirely?

    Are span array supposed to be slower?

    Authors should know what they send out...

    spans hard check their bounds which causes some sensitive areas to get slower. This may or may not be the case here.

    Shall we skip blink folders entirely?

    This is not a discussion that should be had on this CL here. There were spanification efforts in the past and some areas were intentionally skipped due to being performance critical. `wtf/` is one of these very sensitive areas. chrome-memory-safety@ is probably a good alias for a larger discussion.

    Open in Gerrit

    Related details

    Attention is currently required from:
    • Xiang Ji
    Submit Requirements:
    • requirement satisfiedCode-Coverage
    • requirement is not satisfiedCode-Owners
    • requirement is not satisfiedCode-Review
    • requirement is not satisfiedNo-Unresolved-Comments
    • requirement is not satisfiedReview-Enforcement
    Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. DiffyGerrit
    Gerrit-MessageType: comment
    Gerrit-Project: chromium/src
    Gerrit-Branch: main
    Gerrit-Change-Id: I9ecef257ee06bf8aed9a681cdddbf7449a5cae26
    Gerrit-Change-Number: 7812250
    Gerrit-PatchSet: 1
    Gerrit-Owner: Xiang Ji <jxi...@google.com>
    Gerrit-Reviewer: Michael Lippautz <mlip...@chromium.org>
    Gerrit-Reviewer: Xiang Ji <jxi...@google.com>
    Gerrit-Attention: Xiang Ji <jxi...@google.com>
    Gerrit-Comment-Date: Tue, 05 May 2026 11:19:58 +0000
    satisfied_requirement
    unsatisfied_requirement
    open
    diffy
    Reply all
    Reply to author
    Forward
    0 new messages