Bug 241841

Summary: Add validation for offset against size for multidraw calls.
Product: WebKit Reporter: John Cunningham <johncunningham>
Component: WebGLAssignee: Nobody <webkit-unassigned>
Status: NEW    
Severity: Normal CC: dino, kbr, kkinnunen, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   

John Cunningham
Reported 2022-06-21 23:34:20 PDT
Check that the offset of firsts/counts/instanceCount does not exceed the size
Attachments
Add attachment proposed patch, testcase, etc.
John Cunningham
Comment 1 2022-06-21 23:37:57 PDT
Pull request: https://github.com/WebKit/WebKit/pull/1674
Radar WebKit Bug Importer
Comment 2 2022-06-28 23:35:12 PDT
<rdar://problem/96117578>
Note You need to log in before you can comment on or make changes to this bug.