1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
// SPDX-FileCopyrightText: Copyright 2025 Au-Zone Technologies
// SPDX-License-Identifier: Apache-2.0
use super::cache::BufferImportKey;
use super::platform::{GlPlatform, Platform};
use super::shaders::check_gl_error;
use std::ffi::{c_void, CStr};
use std::ptr::null;
pub(super) struct Texture {
pub(super) id: u32,
pub(super) target: edgefirst_gl::gl::types::GLenum,
pub(super) width: usize,
pub(super) height: usize,
pub(super) format: edgefirst_gl::gl::types::GLenum,
/// Which EGLImage (identified by buffer identity key) is currently bound
/// to this texture via `glEGLImageTargetTexture2DOES`. `None` means no
/// EGLImage is bound (or the binding has been invalidated).
bound_egl_key: Option<BufferImportKey>,
}
impl Default for Texture {
fn default() -> Self {
Self::new()
}
}
impl Texture {
pub(super) fn new() -> Self {
let mut id = 0;
unsafe { edgefirst_gl::gl::GenTextures(1, &raw mut id) };
Self {
id,
target: 0,
width: 0,
height: 0,
format: 0,
bound_egl_key: None,
}
}
/// Upload `data` as this texture's contents.
///
/// `required` is how many bytes GL will read: `(height - 1)` row strides
/// plus the last row's own pixels, where the stride is whatever
/// `UNPACK_ROW_LENGTH` the caller has set (`UNPACK_ALIGNMENT` is 1 from
/// `new`, so rows carry no extra padding). GL reads through a raw
/// pointer and cannot see the slice's length, so a `data` shorter than
/// that would have the driver read past the mapping -- which is not a
/// hypothetical: a tensor's map is clamped to what its window actually
/// covers (`HostView::len_elems`), so a plane offset restored from an
/// untrusted descriptor shortens the map while width and height stay
/// whole. Refusing here turns that into a fallback to the CPU converter
/// instead of an out-of-bounds read. See
/// `crates/tensor/src/d3d11/texture.rs::check_view_offset` and
/// `IoSurfaceTensor::check_view_offset`, which refuse the same window at
/// the source; this is the check that does not depend on which backing
/// produced the map.
pub(super) fn update_texture(
&mut self,
target: edgefirst_gl::gl::types::GLenum,
width: usize,
height: usize,
format: edgefirst_gl::gl::types::GLenum,
required: usize,
data: &[u8],
) -> crate::Result<()> {
if data.len() < required {
return Err(crate::Error::NotSupported(format!(
"GL upload: {width}x{height} texture needs {required} B but the \
source maps only {} B -- a window that does not cover its own \
image (a restored plane offset past the buffer?); converting \
on the CPU instead",
data.len()
)));
}
if target != self.target
|| width != self.width
|| height != self.height
|| format != self.format
{
unsafe {
edgefirst_gl::gl::TexImage2D(
target,
0,
format as i32,
width as i32,
height as i32,
0,
format,
edgefirst_gl::gl::UNSIGNED_BYTE,
data.as_ptr() as *const c_void,
);
}
self.target = target;
self.format = format;
self.width = width;
self.height = height;
// TexImage2D reallocates the texture, invalidating any EGLImage binding.
self.bound_egl_key = None;
} else {
unsafe {
edgefirst_gl::gl::TexSubImage2D(
target,
0,
0,
0,
width as i32,
height as i32,
format,
edgefirst_gl::gl::UNSIGNED_BYTE,
data.as_ptr() as *const c_void,
);
}
}
Ok(())
}
/// Attach a platform import to this GL_TEXTURE_2D texture if the key
/// differs from what's already bound. Returns `true` if the attach was
/// performed, `false` if skipped (already bound). The binding-skip
/// cache applies only where attachments persist
/// (`GlPlatform::PERSISTENT_TEX_BINDINGS`) — on macOS every call
/// attaches and the platform releases at its sync point.
///
/// # Safety
/// Caller must ensure the texture is bound to the active texture unit
/// and `handle`'s import is alive (cache-owned).
pub(super) unsafe fn bind_egl_image(
&mut self,
display: &<Platform as GlPlatform>::Display,
key: BufferImportKey,
handle: <Platform as GlPlatform>::ImportHandle,
) -> crate::Result<bool> {
if Platform::PERSISTENT_TEX_BINDINGS && self.bound_egl_key == Some(key) {
return Ok(false);
}
unsafe { Platform::attach_tex_image_2d(display, handle)? };
if Platform::PERSISTENT_TEX_BINDINGS {
self.bound_egl_key = Some(key);
}
Ok(true)
}
/// Attach a platform import to this GL_TEXTURE_EXTERNAL_OES texture if
/// the key differs from what's already bound. Returns `true` if the
/// attach was performed, `false` if skipped. Errors on platforms
/// without the OES extension (`PlatformCaps::external_oes` gates the
/// path before it gets here).
///
/// # Safety
/// As [`Self::bind_egl_image`].
pub(super) unsafe fn bind_egl_image_external(
&mut self,
display: &<Platform as GlPlatform>::Display,
key: BufferImportKey,
handle: <Platform as GlPlatform>::ImportHandle,
) -> crate::Result<bool> {
if Platform::PERSISTENT_TEX_BINDINGS && self.bound_egl_key == Some(key) {
return Ok(false);
}
unsafe { Platform::attach_tex_image_external(display, handle)? };
if Platform::PERSISTENT_TEX_BINDINGS {
self.bound_egl_key = Some(key);
}
Ok(true)
}
/// Invalidate the cached EGL binding key. Must be called when the
/// EGLImage cache evicts the entry this texture was using, or when
/// `TexImage2D` overwrites the texture storage.
pub(super) fn invalidate_egl_binding(&mut self) {
self.bound_egl_key = None;
}
}
impl Drop for Texture {
fn drop(&mut self) {
let _ = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| unsafe {
edgefirst_gl::gl::DeleteTextures(1, &raw mut self.id)
}));
}
}
pub(super) struct Buffer {
pub(super) id: u32,
pub(super) buffer_index: u32,
}
impl Buffer {
pub(super) fn new(buffer_index: u32, size_per_point: usize, max_points: usize) -> Buffer {
let mut id = 0;
unsafe {
edgefirst_gl::gl::EnableVertexAttribArray(buffer_index);
edgefirst_gl::gl::GenBuffers(1, &raw mut id);
edgefirst_gl::gl::BindBuffer(edgefirst_gl::gl::ARRAY_BUFFER, id);
edgefirst_gl::gl::VertexAttribPointer(
buffer_index,
size_per_point as i32,
edgefirst_gl::gl::FLOAT,
edgefirst_gl::gl::FALSE,
0,
null(),
);
edgefirst_gl::gl::BufferData(
edgefirst_gl::gl::ARRAY_BUFFER,
(size_of::<f32>() * size_per_point * max_points) as isize,
null(),
edgefirst_gl::gl::DYNAMIC_DRAW,
);
}
Buffer { id, buffer_index }
}
}
impl Drop for Buffer {
fn drop(&mut self) {
let _ = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| unsafe {
edgefirst_gl::gl::DeleteBuffers(1, &raw mut self.id)
}));
}
}
pub(super) struct FrameBuffer {
pub(super) id: u32,
}
impl FrameBuffer {
pub(super) fn new() -> FrameBuffer {
let mut id = 0;
unsafe {
edgefirst_gl::gl::GenFramebuffers(1, &raw mut id);
}
FrameBuffer { id }
}
pub(super) fn bind(&self) {
unsafe { edgefirst_gl::gl::BindFramebuffer(edgefirst_gl::gl::FRAMEBUFFER, self.id) };
}
pub(super) fn unbind(&self) {
unsafe { edgefirst_gl::gl::BindFramebuffer(edgefirst_gl::gl::FRAMEBUFFER, 0) };
}
}
impl Drop for FrameBuffer {
fn drop(&mut self) {
let _ = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
self.unbind();
unsafe {
edgefirst_gl::gl::DeleteFramebuffers(1, &raw mut self.id);
}
}));
}
}
pub(super) struct GlProgram {
pub(super) id: u32,
}
impl GlProgram {
pub(super) fn new(vertex_shader: &str, fragment_shader: &str) -> Result<Self, crate::Error> {
// Shared compile+link (deletes the shaders after a successful link) —
// see `gl::core::compile_program`.
let id = unsafe { super::core::compile_program(vertex_shader, fragment_shader)? };
unsafe { edgefirst_gl::gl::UseProgram(id) };
Ok(Self { id })
}
pub(super) fn load_uniform_1f(&self, name: &CStr, value: f32) -> Result<(), crate::Error> {
unsafe {
edgefirst_gl::gl::UseProgram(self.id);
let location = edgefirst_gl::gl::GetUniformLocation(self.id, name.as_ptr());
edgefirst_gl::gl::Uniform1f(location, value);
}
Ok(())
}
pub(super) fn load_uniform_1i(&self, name: &CStr, value: i32) -> Result<(), crate::Error> {
unsafe {
edgefirst_gl::gl::UseProgram(self.id);
let location = edgefirst_gl::gl::GetUniformLocation(self.id, name.as_ptr());
edgefirst_gl::gl::Uniform1i(location, value);
}
Ok(())
}
pub(super) fn load_uniform_4fv(
&self,
name: &CStr,
value: &[[f32; 4]],
) -> Result<(), crate::Error> {
unsafe {
edgefirst_gl::gl::UseProgram(self.id);
let location = edgefirst_gl::gl::GetUniformLocation(self.id, name.as_ptr());
if location == -1 {
return Err(crate::Error::OpenGl(format!(
"Could not find uniform location for '{}'",
name.to_string_lossy().into_owned()
)));
}
edgefirst_gl::gl::Uniform4fv(
location,
value.len() as i32,
value.as_flattened().as_ptr(),
);
}
check_gl_error(function!(), line!())?;
Ok(())
}
}
impl Drop for GlProgram {
fn drop(&mut self) {
let _ = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| unsafe {
edgefirst_gl::gl::DeleteProgram(self.id);
}));
}
}