summaryrefslogtreecommitdiffstats
path: root/dom/canvas/WebGLContextBuffers.cpp
diff options
context:
space:
mode:
authorwolfbeast <mcwerewolf@wolfbeast.com>2019-10-24 12:17:39 +0200
committerwolfbeast <mcwerewolf@wolfbeast.com>2019-10-24 22:42:34 +0200
commitfbb55365326ca10b0f01241ea1e09d50c7cd7e42 (patch)
tree93d9c1026a18b1f4c385bc94450b396baa29f6a1 /dom/canvas/WebGLContextBuffers.cpp
parent28238d1ff5ad0828bd814ecc7d8f081493038fb8 (diff)
downloadUXP-fbb55365326ca10b0f01241ea1e09d50c7cd7e42.tar
UXP-fbb55365326ca10b0f01241ea1e09d50c7cd7e42.tar.gz
UXP-fbb55365326ca10b0f01241ea1e09d50c7cd7e42.tar.lz
UXP-fbb55365326ca10b0f01241ea1e09d50c7cd7e42.tar.xz
UXP-fbb55365326ca10b0f01241ea1e09d50c7cd7e42.zip
Add size checks to WebGLContext::BufferData()
On MacOS, particularly large allocations within the platform limits (1.2G+) will fail and crash. This adds a specific size check for that when working around driver bugs (default). While there, added a generic size_t limited size check for the platform, and reporting OOM if too large.
Diffstat (limited to 'dom/canvas/WebGLContextBuffers.cpp')
-rw-r--r--dom/canvas/WebGLContextBuffers.cpp12
1 files changed, 12 insertions, 0 deletions
diff --git a/dom/canvas/WebGLContextBuffers.cpp b/dom/canvas/WebGLContextBuffers.cpp
index af506c01c..f53f9d7d7 100644
--- a/dom/canvas/WebGLContextBuffers.cpp
+++ b/dom/canvas/WebGLContextBuffers.cpp
@@ -9,6 +9,8 @@
#include "WebGLBuffer.h"
#include "WebGLVertexArray.h"
+#include "mozilla/CheckedInt.h"
+
namespace mozilla {
WebGLRefPtr<WebGLBuffer>*
@@ -345,6 +347,16 @@ WebGLContext::BufferData(GLenum target, WebGLsizeiptr size, GLenum usage)
////
+ const auto checkedSize = CheckedInt<size_t>(size);
+ if (!checkedSize.isValid())
+ return ErrorOutOfMemory("%s: Size too large for platform.", funcName);
+
+#if defined(XP_MACOSX)
+ if (gl->WorkAroundDriverBugs() && size > 1200000000) {
+ return ErrorOutOfMemory("Allocations larger than 1200000000 fail on MacOS.");
+ }
+#endif
+
const UniqueBuffer zeroBuffer(calloc(size, 1));
if (!zeroBuffer)
return ErrorOutOfMemory("%s: Failed to allocate zeros.", funcName);