Firefox · DOM
CVE-2026-12308
Logic Error in DOM
Overview
Medium
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Changed Functions
| Function | Change | Notes |
|---|---|---|
ifdom/canvas/WebGLBuffer.cpp |
modified |
Files Changed
dom/canvas/WebGLBuffer.cpp
Patch
diff --git a/dom/canvas/WebGLBuffer.cpp b/dom/canvas/WebGLBuffer.cpp
index e08211851bc..f80490f90a3 100644
--- a/dom/canvas/WebGLBuffer.cpp
+++ b/dom/canvas/WebGLBuffer.cpp
@@ -119,7 +119,7 @@ void WebGLBuffer::BufferData(const GLenum target, const uint64_t size,
UniqueBuffer newIndexCache;
const bool needsIndexCache = mContext->mNeedsIndexValidation ||
mContext->mMaybeNeedsLegacyVertexAttrib0Handling;
- if (target == LOCAL_GL_ELEMENT_ARRAY_BUFFER && needsIndexCache) {
+ if (mContent == WebGLBuffer::Kind::ElementArray && needsIndexCache) {
newIndexCache = UniqueBuffer::Take(malloc(AssertedCast<size_t>(size)));
if (!newIndexCache) {
mContext->ErrorOutOfMemory("Failed to alloc index cache.");
Loading diff…
References
On This Page