Firefox · DOM
CVE-2025-11715
Memory Corruption in DOM
Overview
High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Files Changed
dom/canvas/WebGLTexelConversions.h
Patch
diff --git a/dom/canvas/WebGLTexelConversions.h b/dom/canvas/WebGLTexelConversions.h
index 4d5d54ce87b..3ceee155a20 100644
--- a/dom/canvas/WebGLTexelConversions.h
+++ b/dom/canvas/WebGLTexelConversions.h
@@ -1395,6 +1395,24 @@ MOZ_ALWAYS_INLINE void convertType<float, uint8_t>(const float* __restrict src,
dst[3] = uint8_t(src[3] * scaleFactor);
}
+template <>
+MOZ_ALWAYS_INLINE void convertType<uint16_t, float>(
+ const uint16_t* __restrict src, float* __restrict dst) {
+ dst[0] = unpackFromFloat16(src[0]);
+ dst[1] = unpackFromFloat16(src[1]);
+ dst[2] = unpackFromFloat16(src[2]);
+ dst[3] = unpackFromFloat16(src[3]);
+}
+
+template <>
+MOZ_ALWAYS_INLINE void convertType<float, uint16_t>(const float* __restrict src,
+ uint16_t* __restrict dst) {
+ dst[0] = packToFloat16(src[0]);
+ dst[1] = packToFloat16(src[1]);
+ dst[2] = packToFloat16(src[2]);
+ dst[3] = packToFloat16(src[3]);
+}
+
template <>
MOZ_ALWAYS_INLINE void convertType<uint8_t, uint16_t>(
const uint8_t* __restrict src, uint16_t* __restrict dst) {
Loading diff…
References
On This Page