29230 2009-09-12 20:49:29 -0700 Need to ensure that incorrect parameters and types are never sent to OpenGL from WebGL 2020-07-31 15:11:26 -0700 1 1 1 Unclassified WebKit WebGL 528+ (Nightly build) PC OS X 10.5 RESOLVED WONTFIX P2 Normal --- 38145 40175 41095 41574 1 cmarrin cmarrin bfulgham dino ilmari.heikkinen jdarpinian kbr simon.fraser zmo oldest_to_newest 146975 0 cmarrin 2009-09-12 20:49:29 -0700 Passing badly typed uniform or vertex data to OpenGL can cause some drivers to crash. We need to do sufficient checks to prevent that from happening. For instance, passing a vertexAttribPointer as UNSIGNED_BYTE with 3 values when the value is actually FLOAT with 2 values will crash some hardware and not others. likewise, passing UNSIGNED_BYTE with 3 values to a vertexAttrib of type vec4 will crash some hardware. 147036 1 ilmari.heikkinen 2009-09-14 03:39:21 -0700 These tests written against the Firefox GL canvas might be helpful: http://github.com/kig/canvas3d-tests 246378 2 zmo 2010-07-03 18:46:24 -0700 I think after all the dependency patches land, the only thing left unchecked is vertexArreibPointer()'s "type". GL_FIXED is a valid enum for type in GLES2, but it's not supported in GL. I think we should add in the spec that FIXED is not allowed in WebGL. 247920 3 kbr 2010-07-07 18:21:00 -0700 The WebGL spec has been updated to explicitly state that the GL_FIXED data type is not supported. 966191 4 bfulgham 2014-01-09 20:39:09 -0800 Dean - I think we can close this based on the specification change. 1676990 5 kbr 2020-07-31 15:11:26 -0700 Closing this old bug. WebKit's ANGLE backend, which is a conformant ES 2.0 / 3.0 implementation, has conclusively fixed this.