pierrelf.com / we
we (web engine): Experimental web browser project to understand the limits of Claude
2
fork

Configure Feed

Select the types of activity you want to include in your feed.

Validate data slice length before Metal texture upload

Prevents potential out-of-bounds read by checking that the data slice
is at least bytes_per_row * height before passing it to Metal's
replaceRegion:withBytes:bytesPerRow: API.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

authored by

Pierre Le Fevre
Claude Opus 4.6 (1M context) and committed by tangled.org 6b34b247 75e4f356

+5
+5
crates/platform/src/metal.rs
··· 534 534 return None; 535 535 } 536 536 537 + let required = bytes_per_row as usize * height as usize; 538 + if data.len() < required { 539 + return None; 540 + } 541 + 537 542 let cls = class!("MTLTextureDescriptor")?; 538 543 let desc: *mut c_void = msg_send![ 539 544 cls.as_ptr(),