| Summary: | InstancedArray crashes attempting to draw out of bounds | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Product: | WebKit | Reporter: | Dean Jackson <dino> | ||||||||||
| Component: | New Bugs | Assignee: | Dean Jackson <dino> | ||||||||||
| Status: | RESOLVED FIXED | ||||||||||||
| Severity: | Normal | CC: | buildbot, esprehn+autocc, gyuyoung.kim, kondapallykalyan, rniwa, roger_fong | ||||||||||
| Priority: | P2 | ||||||||||||
| Version: | 528+ (Nightly build) | ||||||||||||
| Hardware: | Unspecified | ||||||||||||
| OS: | Unspecified | ||||||||||||
| Attachments: |
|
||||||||||||
|
Description
Dean Jackson
2014-12-10 18:41:19 PST
Created attachment 243088 [details]
Patch
Comment on attachment 243088 [details] Patch Attachment 243088 [details] did not pass mac-ews (mac): Output: http://webkit-queues.appspot.com/results/5385253694734336 New failing tests: fast/canvas/webgl/angle-instanced-arrays-out-of-bounds.html Created attachment 243115 [details]
Archive of layout-test-results from ews100 for mac-mountainlion
The attached test failures were seen while running run-webkit-tests on the mac-ews.
Bot: ews100 Port: mac-mountainlion Platform: Mac OS X 10.8.5
Comment on attachment 243088 [details] Patch Attachment 243088 [details] did not pass mac-wk2-ews (mac-wk2): Output: http://webkit-queues.appspot.com/results/5963765388410880 New failing tests: fast/canvas/webgl/angle-instanced-arrays-out-of-bounds.html Created attachment 243116 [details]
Archive of layout-test-results from ews106 for mac-mountainlion-wk2
The attached test failures were seen while running run-webkit-tests on the mac-wk2-ews.
Bot: ews106 Port: mac-mountainlion-wk2 Platform: Mac OS X 10.8.5
Created attachment 243131 [details]
Patch
Comment on attachment 243131 [details] Patch View in context: https://bugs.webkit.org/attachment.cgi?id=243131&action=review > Source/WebCore/html/canvas/WebGLRenderingContext.cpp:2061 > +bool WebGLRenderingContext::validateDrawElements(const char* functionName, GC3Denum mode, GC3Dsizei count, GC3Denum type, long long offset, unsigned& numElements, GC3Dsizei primcount) primitiveCount? Committed r177165: <http://trac.webkit.org/changeset/177165> |