Validate that the mip level is not too large for CopyTextureCHROMIUM.

When the mip level was greater than the maximum, it could cause an out-of-bounds read when trying to query the Texture's size and format later in the validation. BUG=740426 Change-Id: Ibd6c977981e5f8b7368c161b7969d9e916c6095b

Validate that the mip level is not too large for CopyTextureCHROMIUM.
3847f94d · Geoff Lang · 1636e1b9 · 3847f94d
Commit 3847f94d authored Jul 12, 2017 by Geoff Lang
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 2 deletions

validationES2.cpp src/libANGLE/validationES2.cpp +2 -2

No files found.
--- a/src/libANGLE/validationES2.cpp
+++ b/src/libANGLE/validationES2.cpp
@@ -342,7 +342,7 @@ bool IsValidCopyTextureSourceTarget(Context *context, GLenum target)

 bool IsValidCopyTextureSourceLevel(Context *context, GLenum target, GLint level)
 {
-    if (level < 0)
+    if (!ValidMipLevel(context, target, level))
    {
        return false;
    }
@@ -361,7 +361,7 @@ bool IsValidCopyTextureDestinationLevel(Context *context,
                                        GLsizei width,
                                        GLsizei height)
 {
-    if (level < 0)
+    if (!ValidMipLevel(context, target, level))
    {
        return false;
    }