Change information
Commit message:
[M149] [WebXR] Check buffer detachment in XRFrame::fillPoses
Original change's description:
> [WebXR] Check buffer detachment in XRFrame::fillPoses
>
> During XRFrame::fillPoses, calling XRSpace::getPose() can synchronously
> execute script event handlers (e.g., reset events). This script may
> detach the passed-in Float32Array transforms buffer. This change validates
> that the array buffer is not detached prior to writing pose matrices.
>
> Fixed: 513774197
> Change-Id: Iac568599933c366e88e56659b783eff92f67948c
> Reviewed-on: https://chromium-review.googlesource.com/c/chromium/src/+/7872178
> Reviewed-by: Brandon Jones <baj...@chromium.org>
> Commit-Queue: Brandon Jones <baj...@chromium.org>
> Auto-Submit: Alexander Cooper <alco...@chromium.org>
> Cr-Commit-Position: refs/heads/main@{#1636464}
(cherry picked from commit 0bf582443baa115943b71303e89869f41acd5c88)
Bug: 517018364,513774197
Change-Id: Iac568599933c366e88e56659b783eff92f67948c
Cr-Commit-Position: refs/branch-heads/7827@{#1958}
Cr-Branched-From: 9f3e9aaccba63bd2ec30334e45e0bfd07ebcc8f1-refs/heads/main@{#1625079}
Files:
- M third_party/blink/renderer/modules/xr/xr_frame.cc
Change size: S
Delta: 1 file changed, 13 insertions(+), 1 deletion(-)
Branch: refs/branch-heads/7827