commit 6b10ddbf74a2a5f65a507f5a81149ca41286067a
author Geoff Lang <geofflang@chromium.org> Wed Sep 02 15:55:10 2015 -0400
committer Geoff Lang <geofflang@chromium.org> Fri Sep 04 14:34:42 2015 +0000
tree 987740ad57e2088de03a5a39f0554db017c31652
parent 20c14e3f277c0089bd41d144a89817d64a7c4e79

Fix the vertex copy loop iterating over one too many elements.

BUG=angleproject:1149
BUG=angleproject:880

Change-Id: I2840043ded50f805afa3032fc1f0362fa91b8877
Reviewed-on: https://chromium-review.googlesource.com/297088
Tryjob-Request: Geoff Lang <geofflang@chromium.org>
Reviewed-by: Corentin Wallez <cwallez@chromium.org>
Reviewed-by: Jamie Madill <jmadill@chromium.org>
Tested-by: Geoff Lang <geofflang@chromium.org>

src/libANGLE/renderer/gl/VertexArrayGL.cpp

diff --git a/src/libANGLE/renderer/gl/VertexArrayGL.cpp b/src/libANGLE/renderer/gl/VertexArrayGL.cpp
index 1166ae2..9f9b7ca 100644
--- a/src/libANGLE/renderer/gl/VertexArrayGL.cpp
+++ b/src/libANGLE/renderer/gl/VertexArrayGL.cpp
@@ -318,7 +318,7 @@
             else
             {
                 // Copy each vertex individually
-                for (size_t vertexIdx = 0; vertexIdx <= streamedVertexCount; vertexIdx++)
+                for (size_t vertexIdx = 0; vertexIdx < streamedVertexCount; vertexIdx++)
                 {
                     uint8_t *out = bufferPointer + curBufferOffset + (destStride * vertexIdx);
                     const uint8_t *in =