diff options
Diffstat (limited to 'chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc')
| -rw-r--r-- | chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc b/chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc index be9abe8def3..6737c6e7067 100644 --- a/chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc +++ b/chromium/ppapi/proxy/ppapi_command_buffer_proxy.cc @@ -147,7 +147,8 @@ scoped_refptr<gpu::Buffer> PpapiCommandBufferProxy::CreateTransferBuffer( base::WritableSharedMemoryMapping shared_memory_mapping = shared_memory_region.Map(); - if (!shared_memory_mapping.IsValid()) { + if (!shared_memory_mapping.IsValid() || + (shared_memory_mapping.size() > UINT32_MAX)) { if (last_state_.error == gpu::error::kNoError) last_state_.error = gpu::error::kOutOfBounds; *id = -1; |