tree 72f6406afe092de09bf6f37afe49e1446de9cd82
parent b83b0f5e9f63261d3d95a75b74ad758509d7a349
author Geoff Lang <geofflang@chromium.org> 1585326292 -0400
committer Commit Bot <commit-bot@chromium.org> 1585598534 +0000

Update the active texture cache before changing the texture binding.

When a new texture is bound, the texture binding state is updated before
updating the active texture cache. With this ordering, it is possible to delete
the currently bound texture when the binding changes and then use-after-free it
when updating the active texture cache.

BUG=angleproject:1065186

Change-Id: Id6d56b6c6db423755b195cda1e5cf1bcb1ee7aee
Reviewed-on: https://chromium-review.googlesource.com/c/angle/angle/+/2124588
Commit-Queue: Geoff Lang <geofflang@chromium.org>
Reviewed-by: Jamie Madill <jmadill@chromium.org>