Branch: refs/heads/main
Home: https://github.com/WebKit/WebKit
Commit: 56c55ddc3836f2d889530d66d5c452849e2c4b42
https://github.com/WebKit/WebKit/commit/56c55ddc3836f2d889530d66d5c452849e2c4b42
Author: Kimmo Kinnunen <[email protected]>
Date: 2026-06-16 (Tue, 16 Jun 2026)
Changed paths:
M Source/ThirdParty/ANGLE/ANGLE.xcodeproj/project.pbxproj
M Source/ThirdParty/ANGLE/src/common/mathutil.h
M Source/ThirdParty/ANGLE/src/common/utilities_unittest.cpp
M Source/ThirdParty/ANGLE/src/tests/gl_tests/WebGLCompatibilityTest.cpp
Log Message:
-----------
ANGLE: IndexRange integer overflow bypasses vertex index validation
https://bugs.webkit.org/show_bug.cgi?id=310535
rdar://173006046
Reviewed by Dan Glastonbury.
IndexRange would mark up index range with uint32_t start, uint32_t count
which can not easily represent range [0, 0xFFFFFFFF].
Switch to start, end markup, with start > end marking empty range.
* Source/ThirdParty/ANGLE/ANGLE.xcodeproj/project.pbxproj:
* Source/ThirdParty/ANGLE/src/common/mathutil.h:
(gl::IndexRange::IndexRange):
(gl::IndexRange::isEmpty const):
(gl::IndexRange::end const):
(gl::IndexRange::vertexCount const):
(gl::operator==): Deleted.
* Source/ThirdParty/ANGLE/src/common/utilities_unittest.cpp:
* Source/ThirdParty/ANGLE/src/tests/gl_tests/WebGLCompatibilityTest.cpp:
Originally-landed-as: 305413.563@rapid/safari-7624.2.5.110-branch
(b0e22543a19b). rdar://176061545
Canonical link: https://commits.webkit.org/315326@main
To unsubscribe from these emails, change your notification settings at
https://github.com/WebKit/WebKit/settings/notifications
