https://bugs.freedesktop.org/show_bug.cgi?id=91889
--- Comment #23 from Eirik Byrkjeflot Anonsen <ei...@eirikba.org> --- (In reply to almos from comment #22) > (In reply to Eirik Byrkjeflot Anonsen from comment #21) > > > No matter what they shouldn't be able to get that data. I'm starting to > > > think if it's possible to grab that data with OpenGL would it be also > > > possible with WebGL... > > > > It should not be possible with WebGL. One of the things that delayed WebGL's > > general availability was that the specification required that all data shall > > be initialized. This was explicitly mentioned as being a difference from > > other OpenGL specifications due to the different threat models. > > Well, this bug might be an indication that Mesa doesn't initialize all data. Mesa is an OpenGL implementation, not a WebGL implementation, so there is nothing wrong with that. That is, there is nothing in the OpenGL specifications (as far as I know) that says Mesa is doing something wrong. Arguably, this is based on an outdated threat model where local applications are trusted. A more modern understanding of local application security would probably indicate that the threat model should be changed to protect against such information leaks. -- You are receiving this mail because: You are the QA Contact for the bug. You are the assignee for the bug.
_______________________________________________ mesa-dev mailing list mesa-dev@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/mesa-dev
