On Tue, Jul 30, 2019 at 12:55 PM Alyssa Rosenzweig <alyssa.rosenzweig@xxxxxxxxxxxxx> wrote: > > > In any case, per process AS is a prerequisite to all this. > > Oh, I hadn't realized that was still a todo. In the meantime, what's the > implication of shipping without it? (I.e. in which threat model are > users vulnerable without it?) Malicious userspace process snooping on > other framebuffers (on X11, they could do that anyway...)? Malicious > userspace actually interfering with operation of other processes (is > this really exploitable or just a theoretical concern)? Malicious 3D > apps breaking out of the sandbox (i.e. WebGL) via a driver bug and > snooping on other processes? I don't know. However, it's not that uncommon. freedreno is only now in the process of supporting it. vc4 can't. v3d doesn't yet support separate address spaces. Rob _______________________________________________ dri-devel mailing list dri-devel@xxxxxxxxxxxxxxxxxxxxx https://lists.freedesktop.org/mailman/listinfo/dri-devel