This adds validation for the sampling rects against the data size so that sampling is bounded.
Bug 2005658 Comment 5 Edit History
Note: The actual edited comment in the bug view page will always show the original commenter’s name and original timestamp.
This adds validation for the sampling rects against the data size so that sampling is bounded. It is in the general area of bug 2005014 (which ensured sampling math couldn't overflow), but is a distinct bug from it.