WebCL

Currently, no browsers natively support WebCL. However, non-native add-ons are used to implement WebCL. For example, Nokia developed a WebCL extension.[3] Mozilla does not plan to implement WebCL in favor of WebGL Compute Shaders, which were in turn scrapped in favor of WebGPU.

• Mozilla (Firefox) - hg.mozilla.org/projects/webcl/

for (i = 0; i< 3 ; i++)
	c[i] = a[i] + b[i];

c[0] = a[0] + b[0];
c[1] = a[1] + b[1];
c[2] = a[2] + b[2];

__kernel add(__global float* a, __global float* b, __global float*c)
{
	int i = get_global_id(0);

	if (i<3)
		c[i] = a[i] + b[i];
}

WebCL, being a JavaScript based implementation, doesn't return an error code when errors occur. Instead, it throws an exception such as OUT_OF_RESOURCES, OUT_OF_HOST_MEMORY, or the WebCL-specific WEBCL_IMPLEMENTATION_FAILURE.[6] The exception object describes the machine-readable name and human-readable message describing the error. The syntax is as follows:

exception WebCLException : DOMException {
  DOMString name;     // A string representation of the numeric error code, e.g. "INVALID_VALUE"
  DOMString? message; // An implementation-specific description of what caused the exception
};

From the code above, it can be observed that the message field can be a NULL value. Other exceptions include:

1. INVALID_OPERATION – if the blocking form of this function is called from a WebCLCallback
2. INVALID_VALUE – if eventWaitList is empty
3. INVALID_CONTEXT – if events specified in eventWaitList do not belong to the same context
4. INVALID_DEVICE_TYPE – if deviceType is given, but is not one of the valid enumerated values
5. DEVICE_NOT_FOUND – if there is no WebCLDevice available that matches the given deviceType

More information on exceptions can be found in the specs document.[6]

There is another exception that is raised upon trying to call an object that is ‘released’. On using the release method, the object doesn't get deleted permanently but it frees the resources associated with that object. In order to avoid this exception, releaseAll method can be used, which not only frees the resources but also deletes all the associated objects created.

WebCL, being an open-ended software developed for web applications, there is lot of scope for vulnerabilities in the design and development fields too. This forced the developers working on WebCL to give security the utmost importance. Few concerns that were addressed are:

1. Out-of-bounds Memory Access: This occurs by accessing the memory locations, outside the allocated space. An attacker can rewrite or erase all the important data stored in those memory locations. Whenever there arises such a case, an error must be generated at the compile time, and zero must be returned at run-time, not letting the program override the memory. A project WebCL Validator,[7] was initiated by the Khronos Group (developers) on handling this vulnerability.
2. Memory Initialization: This is done to prevent the applications to access the memory locations of previous applications. WebCL ensures that this doesn't happen by initializing all the buffers, variables used to zero before it runs the current application. OpenCL 1.2 has an extension ‘cl_khr_initialize_memory’, which enables this.[6]
3. Denial of Service: The most common attack on web applications cannot be totally eliminated by WebCL or the browser. OpenCL can be provided with watchdog timers and pre-emptive multitasking, which can be used by WebCL in order to detect and terminate the contexts that are taking too long or consume lot of resources. There is an extension of OpenCL 1.2 ‘cl_khr_terminate_context’ like for the previous one, which enables to terminate the process that might cause a denial of service attack.[6]

• Bug 664147 - [WebCL] add openCL in gecko, Mozilla
• Bug 115457: [Meta] WebCL support for WebKit, WebKit Bugzilla

• WebGL
• HTML5
• OpenGL
• OpenCL
• GPGPU
• WebGPU

• Official website
• WebCL Specification
• WebCL Wiki