The IDL bindings code converts the argument ArrayBufferView? pixels to auto pixels = toArrayBufferView(state->uncheckedArgument(8)); inside JSWebGLRenderingContextBase.cpp toArrayBufferView returns nullptr if the input is a wrong type, so this case is indistinguishable from passing "null" in javascript. However, passing an unknown type should throw an exception, and passing "null" should cause "a buffer of sufficient size initialized to 0 is passed."
Created attachment 292219 [details] Test
This is causing https://www.khronos.org/registry/webgl/conformance-suites/1.0.2/conformance/textures/tex-image-with-invalid-data.html to fail.
Thanks, I am looking into it.
Created attachment 292233 [details] Patch
👏
Comment on attachment 292233 [details] Patch Clearing flags on attachment: 292233 Committed r207634: <http://trac.webkit.org/changeset/207634>
All reviewed patches have been landed. Closing bug.