Issue #8738: bufferSubData and texImage2D argument sanity checks.

components/script/dom/webglbuffer.rs

@@ -18,6 +18,7 @@ pub struct WebGLBuffer {
     id: u32,
     /// The target to which this buffer was bound the first time
     target: Cell<Option<u32>>,
+    capacity: Cell<usize>,
     is_deleted: Cell<bool>,
     #[ignore_heap_size_of = "Defined in ipc-channel"]
     renderer: IpcSender<CanvasMsg>,
@@ -29,6 +30,7 @@ impl WebGLBuffer {
             webgl_object: WebGLObject::new_inherited(),
             id: id,
             target: Cell::new(None),
+            capacity: Cell::new(0),
             is_deleted: Cell::new(false),
             renderer: renderer,
         }
@@ -68,6 +70,24 @@ impl WebGLBuffer {
         Ok(())
     }
 
+    pub fn buffer_data(&self, target: u32, data: &[u8], usage: u32) -> WebGLResult<()> {
+        if let Some(previous_target) = self.target.get() {
+            if target != previous_target {
+                return Err(WebGLError::InvalidOperation);
+            }
+        }
+        self.capacity.set(data.len());
+        self.renderer
+            .send(CanvasMsg::WebGL(CanvasWebGLMsg::BufferData(target, data.to_vec(), usage)))
+            .unwrap();
+
+        Ok(())
+    }
+
+    pub fn capacity(&self) -> usize {
+        self.capacity.get()
+    }
+
     pub fn delete(&self) {
         if !self.is_deleted.get() {
             self.is_deleted.set(true);