Google Chrome - GPU Process MailboxManagerImpl Double-Read

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=780 Several functions in the GPU command buffer service interact with the GPU mailbox manager gpu/commandbuffer/service/mailboxmanagerimpl.cc, passing a reference to shared memory as the mailbox argument. MailboxManagerImpl does no...