Fix transform feedback bugs

gpu/command_buffer/service/gles2_cmd_decoder.cc

Index: gpu/command_buffer/service/gles2_cmd_decoder.cc
diff --git a/gpu/command_buffer/service/gles2_cmd_decoder.cc b/gpu/command_buffer/service/gles2_cmd_decoder.cc
index 146791ccd59551da9e795c7aec485cd95f1a825b..4391dda7f6d581ec6c277d958dc49962a211d99a 100644
--- a/gpu/command_buffer/service/gles2_cmd_decoder.cc
+++ b/gpu/command_buffer/service/gles2_cmd_decoder.cc
@@ -4537,6 +4537,36 @@ void GLES2DecoderImpl::DoBindBufferBase(GLenum target, GLuint index,
     // TODO(kbr): track indexed bound buffers.
     service_id = buffer->service_id();
   }
+  switch (target) {
+    case GL_TRANSFORM_FEEDBACK_BUFFER: {
+      GLint max_transform_feedback_separate_attribs = 0;
+      DoGetIntegerv(GL_MAX_TRANSFORM_FEEDBACK_SEPARATE_ATTRIBS,
+                    &max_transform_feedback_separate_attribs);
+      if (index >=
+          static_cast<GLuint>(max_transform_feedback_separate_attribs)) {
+        LOCAL_SET_GL_ERROR(GL_INVALID_VALUE,
+                           "glBindBufferBase", "index out of range");
+        return;
+      }
+      break;
+    }
+    case GL_UNIFORM_BUFFER: {
+      GLint max_uniform_buffer_bindings = 0;
+      DoGetIntegerv(GL_MAX_UNIFORM_BUFFER_BINDINGS,
+                    &max_uniform_buffer_bindings);
+      if (index >= static_cast<GLuint>(max_uniform_buffer_bindings)) {
+        LOCAL_SET_GL_ERROR(GL_INVALID_VALUE,
+                           "glBindBufferBase", "index out of range");
+        return;
+      }
+      break;
+    }
+    default:
+      LOCAL_SET_GL_ERROR_INVALID_ENUM(
+          "glBindBufferBase", target, "invalid target");
+      return;
+  }
+  state_.SetBoundBuffer(target, buffer);
   glBindBufferBase(target, index, service_id);
 }