commit 2f3a0dc5cbc2d3ad58a6bb2546590d03f03c9634
author Yunchao He <yunchao.he@intel.com> Tue Feb 27 22:39:44 2018 +0800
committer Commit Bot <commit-bot@chromium.org> Wed Feb 28 03:00:05 2018 +0000
tree 85e705b681179c6e91b24024956b1b19e34eef98
parent a8e868f2450d3386ca8cf6dde51d7474ea41c067

Report INVALID_VALUE if width/height of invalidateSubFramebuffer is negative.

BUG=angleproject:2376
TEST=dEQP-GLES31.functional.debug.negative_coverage.get_error.buffer.invalidate_sub_framebuffer

Change-Id: Ie1ca30f29d7583c86130f46d4e6b5c7211eee63a
Reviewed-on: https://chromium-review.googlesource.com/938367
Reviewed-by: Jiawei Shao <jiawei.shao@intel.com>
Reviewed-by: Jamie Madill <jmadill@chromium.org>
Commit-Queue: Jamie Madill <jmadill@chromium.org>

src/libANGLE/validationES3.cpp

diff --git a/src/libANGLE/validationES3.cpp b/src/libANGLE/validationES3.cpp
index 0aa209d..a08ae78 100644
--- a/src/libANGLE/validationES3.cpp
+++ b/src/libANGLE/validationES3.cpp
@@ -1231,6 +1231,12 @@
                                       GLsizei width,
                                       GLsizei height)
 {
+    if (width < 0 || height < 0)
+    {
+        ANGLE_VALIDATION_ERR(context, InvalidValue(), NegativeSize);
+        return false;
+    }
+
     return ValidateInvalidateFramebuffer(context, target, numAttachments, attachments);
 }