media: Fix race condition in NDK VEA's temporal scalability parsing [chromium/src : main]
0 views
Skip to first unread message
Dale Curtis (Gerrit)
Feb 11, 2026, 4:31:03 PM (13 hours ago) Feb 11
to Eugene Zemtsov, AyeAye, Chromium LUCI CQ, chromium...@chromium.org, chromeos-gfx-...@google.com, feature-me...@chromium.org, media-cro...@chromium.org
Attention needed from Eugene Zemtsov
Dale Curtis voted Code-Review+1![]( "Open in Gerrit")
| Code-Review | +1 |
Related details
Attention is currently required from:
- Eugene Zemtsov
Submit Requirements:
Code-Coverage
Code-Owners
Code-Review
Review-Enforcement
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Eugene Zemtsov (Gerrit)
Feb 11, 2026, 5:25:06 PM (12 hours ago) Feb 11
to Eugene Zemtsov, Dale Curtis, AyeAye, Chromium LUCI CQ, chromium...@chromium.org, chromeos-gfx-...@google.com, feature-me...@chromium.org, media-cro...@chromium.org
Eugene Zemtsov voted Commit-Queue+2![]( "Open in Gerrit")
Submit Requirements:
Code-Coverage
Code-Owners
Code-Review
Review-Enforcement
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Chromium LUCI CQ (Gerrit)
Feb 11, 2026, 5:35:06 PM (12 hours ago) Feb 11
to Eugene Zemtsov, Dale Curtis, AyeAye, chromium...@chromium.org, chromeos-gfx-...@google.com, feature-me...@chromium.org, media-cro...@chromium.org
Chromium LUCI CQ submitted the change![]( "Open in Gerrit")
Change information
Commit message:
media: Fix race condition in NDK VEA's temporal scalability parsing
Previously, the encoder copied bitstream data to shared memory and then
read it back for metadata parsing. This created a race window where a
compromised renderer could modify the shared memory before the browser
parsed it.
Bug: 483109205
Change-Id: Ic6aec49b840c03fed1b01e2f9c2e553e44eec158
Commit-Queue: Eugene Zemtsov <eug...@chromium.org>
Reviewed-by: Dale Curtis <dalec...@chromium.org>
Cr-Commit-Position: refs/heads/main@{#1583529}
Files:
- M media/gpu/android/ndk_video_encode_accelerator.cc
Change size: XS
Delta: 1 file changed, 2 insertions(+), 2 deletions(-)
Branch: refs/heads/main
Submit Requirements:
Code-Review: +1 by Dale Curtis
| Inspect html for hidden footers to help with email filtering. To unsubscribe visit settings. |
Reply all
Reply to author
Forward
0 new messages