
PoC para uma vulnerabilidade de bypass do SKSL do Chrome + estouro de inteiro -> escrita fora dos limites (OOB) que reportei ao Google no Skia.
Corrigido no Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html
Passos para reproduzir:
Apply the chromium.diff patch to chromium.
Run genskpic.py to generate drawable_picture.skp.hh, then move the generated file to src/gpu/command_buffer/client.
Build and start the browser.
Open any page to trigger PoC.
GPU process will crash.