There is an off-by-one error in the index validation introduced in https://bugs.webkit.org/show_bug.cgi?id=31239 which is one of the reasons some demos no longer work. The computation of the available elements in the bound array buffers does not take into account the fact that for the last element, the number of bytes touched is only that of the data itself, not including the stride.
Created attachment 43875 [details] Patch
Comment on attachment 43875 [details] Patch r=me
Comment on attachment 43875 [details] Patch Clearing flags on attachment: 43875 Committed r51400: <http://trac.webkit.org/changeset/51400>
All reviewed patches have been landed. Closing bug.