“Vulnerabilities in the SwiftShader JIT compiler aren’t being fixed in the SwiftShader codebase.”
Chrome patches SwiftShader bugs by having the front-end compilers translate the bad code patterns away. Google’s own researchers say that produced variants of variants, and that Chrome now has two front-end compilers feeding SwiftShader. They didn’t look for Spectre gadgets and say they’d be surprised if there were none. Chrome shipped a new GPU attack surface to every website and its security team is calling the fix strategy precarious.