<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "https://bugs.webkit.org/page.cgi?id=bugzilla.dtd">

<bugzilla version="5.0.4.1"
          urlbase="https://bugs.webkit.org/"
          
          maintainer="admin@webkit.org"
>

    <bug>
          <bug_id>226468</bug_id>
          
          <creation_ts>2021-05-31 06:07:12 -0700</creation_ts>
          <short_desc>ANGLE Metal translator should clamp array access in MSL</short_desc>
          <delta_ts>2024-01-22 23:52:01 -0800</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>WebKit</product>
          <component>ANGLE</component>
          <version>Other</version>
          <rep_platform>Unspecified</rep_platform>
          <op_sys>Unspecified</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>CONFIGURATION CHANGED</resolution>
          
          <see_also>https://bugs.webkit.org/show_bug.cgi?id=226397</see_also>
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords>InRadar</keywords>
          <priority>P2</priority>
          <bug_severity>Normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Kimmo Kinnunen">kkinnunen</reporter>
          <assigned_to name="Kimmo Kinnunen">kkinnunen</assigned_to>
          <cc>ahmad.saleem792</cc>
    
    <cc>dino</cc>
    
    <cc>ews-watchlist</cc>
    
    <cc>graouts</cc>
    
    <cc>johncunningham</cc>
    
    <cc>kirtiar15502</cc>
    
    <cc>kkinnunen</cc>
    
    <cc>kondapallykalyan</cc>
    
    <cc>kpiddington</cc>
    
    <cc>webkit-bug-importer</cc>
          

      

      

      

          <comment_sort_order>oldest_to_newest</comment_sort_order>  
          <long_desc isprivate="0" >
    <commentid>1765396</commentid>
    <comment_count>0</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2021-05-31 06:07:12 -0700</bug_when>
    <thetext>ANGLE Metal translator should clamp array access in MSL</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765397</commentid>
    <comment_count>1</comment_count>
    <who name="Kirtikumar Anandrao Ramchandani">kirtiar15502</who>
    <bug_when>2021-05-31 06:09:56 -0700</bug_when>
    <thetext>Looks like this issue was created after that, yes?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765398</commentid>
    <comment_count>2</comment_count>
      <attachid>430200</attachid>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2021-05-31 06:10:17 -0700</bug_when>
    <thetext>Created attachment 430200
Patch</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765399</commentid>
    <comment_count>3</comment_count>
    <who name="EWS Watchlist">ews-watchlist</who>
    <bug_when>2021-05-31 06:11:25 -0700</bug_when>
    <thetext>Note that there are important steps to take when updating ANGLE. See https://trac.webkit.org/wiki/UpdatingANGLE</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765403</commentid>
    <comment_count>4</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2021-05-31 06:24:59 -0700</bug_when>
    <thetext>(In reply to Kirtikumar Anandrao Ramchandani from comment #1)
&gt; Looks like this issue was created after that, yes?

This bug report was created based on bug 226397 and after that, yes.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765426</commentid>
    <comment_count>5</comment_count>
    <who name="Dean Jackson">dino</who>
    <bug_when>2021-05-31 11:02:10 -0700</bug_when>
    <thetext>Can we write a test for this?</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765428</commentid>
    <comment_count>6</comment_count>
    <who name="Kirtikumar Anandrao Ramchandani">kirtiar15502</who>
    <bug_when>2021-05-31 11:03:22 -0700</bug_when>
    <thetext>We can write a test case to reach that particular piece of code, yes.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765521</commentid>
    <comment_count>7</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2021-05-31 23:49:48 -0700</bug_when>
    <thetext>(In reply to Dean Jackson from comment #5)
&gt; Can we write a test for this?

At the moment it&apos;s a bit cumbersome.
For manual inspection of shader text output we&apos;d either need to:
a) add a text-dumping translator tester to ANGLE 
b) implement (the long overdue) per-gpu filtering possibility to RWT and use the layout test to dump the GL/MTL shader output to expected files

For draw inspection-based test it&apos;s hard to do since we don&apos;t know what to expect in the failure case. In practice we can&apos;t know that a success would indicate lack of bug.

This is tested by conformance/uniforms/out-of-bounds-uniform-array-access.html but it&apos;s unclear to what extent we can observe the bug. Obviously we cannot, as the test did not trigger.

I&apos;ll check if we can later turn on validating layer for Metal on Debug builds, but I doubt it will detect this either.

I&apos;ll put testing this in the &quot;back burner&quot; and take the liberty to merge without, as we have bigger issues in testing than this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1765522</commentid>
    <comment_count>8</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2021-05-31 23:56:12 -0700</bug_when>
    <thetext>&gt; b) implement (the long overdue) per-gpu filtering possibility to RWT and use the layout test to dump the GL/MTL shader output to expected files


Except, maybe it&apos;s doable since this the &quot;MSL or GLSL or HLSL&quot; decision is per platform in WebKit at the moment. I&apos;ll try to write the test.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1767422</commentid>
    <comment_count>9</comment_count>
    <who name="Radar WebKit Bug Importer">webkit-bug-importer</who>
    <bug_when>2021-06-07 06:08:18 -0700</bug_when>
    <thetext>&lt;rdar://problem/78944685&gt;</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1901038</commentid>
    <comment_count>10</comment_count>
    <who name="Ahmad Saleem">ahmad.saleem792</who>
    <bug_when>2022-09-25 12:42:37 -0700</bug_when>
    <thetext>It seems this r+ patch didn&apos;t landed. Is it something still needed or being worked on? Thanks!</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>1903086</commentid>
    <comment_count>11</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2022-10-04 03:47:55 -0700</bug_when>
    <thetext>Thanks for the heads. I think I need to upstream this.</thetext>
  </long_desc><long_desc isprivate="0" >
    <commentid>2006837</commentid>
    <comment_count>12</comment_count>
    <who name="Kimmo Kinnunen">kkinnunen</who>
    <bug_when>2024-01-22 23:51:52 -0800</bug_when>
    <thetext>Already fixed in  GenMetalTraverser::visitBinary(Visit, TIntermBinary *binaryNode)</thetext>
  </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>430200</attachid>
            <date>2021-05-31 06:10:17 -0700</date>
            <delta_ts>2021-05-31 23:55:06 -0700</delta_ts>
            <desc>Patch</desc>
            <filename>bug-226468-20210531161015.patch</filename>
            <type>text/plain</type>
            <size>2057</size>
            <attacher name="Kimmo Kinnunen">kkinnunen</attacher>
            
              <data encoding="base64">U3VidmVyc2lvbiBSZXZpc2lvbjogMjc4MTkxCmRpZmYgLS1naXQgYS9Tb3VyY2UvVGhpcmRQYXJ0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</data>
<flag name="review"
          id="451576"
          type_id="1"
          status="+"
          setter="dino"
    />
          </attachment>
      

    </bug>

</bugzilla>