mdempsky
2015/05/11 19:25:01
Are VRDevices guaranteed to be created in a single
Are VRDevices guaranteed to be created in a single thread?
What happens if next_id_ wraps around? Is it possible for an attacker on the
web to create and destroy 2^32 VRDevice objects so that IDs are reused?
bajones
2015/05/12 00:13:39
Theoretically, I suppose if you opened a tab, quer
On 2015/05/11 19:25:01, mdempsky wrote:
> Are VRDevices guaranteed to be created in a single thread?
>
> What happens if next_id_ wraps around? Is it possible for an attacker on the
> web to create and destroy 2^32 VRDevice objects so that IDs are reused?
Theoretically, I suppose if you opened a tab, queried VR devices, closed the
tab, and then repeated that a couple billion times, sure. I think at that point
I'm happy to stop returning VR devices, though. I'll add some simple logic to
handle/prevent the wraparound case.
Issue 829803003: Adding Chrome-side WebVR interface
(Closed)
Created 5 years, 11 months ago by bajones
Modified 5 years, 6 months ago
Reviewers: jochen (gone - plz use gerrit), achuithb, brettw, cpu_(ooo_6.6-7.5), jdduke (slow), Ken Russell (switch to Gerrit), kerz_chromium, mdempsky, Mike West, Ken Rockot(use gerrit already), no sievers, sky, Ted C, Tom Sepez, Ilya Sherman
Base URL: https://chromium.googlesource.com/chromium/src.git@master
Comments: 125