Throw exception if curve is too short for setValueCurveAtTime

third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp

Index: third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp
diff --git a/third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp b/third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp
index 54068c6a3b81c2422a1e44129231095271c94822..3377641725c26da5f02ad2dbaf012b55b932556e 100644
--- a/third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp
+++ b/third_party/WebKit/Source/modules/webaudio/AudioParamTimeline.cpp
@@ -194,6 +194,16 @@ void AudioParamTimeline::setValueCurveAtTime(DOMFloat32Array* curve, double time
         || !isPositiveAudioParamTime(duration, exceptionState, "Duration"))
         return;
 
+    if (curve->length() < 2) {
+        exceptionState.throwDOMException(
+            InvalidStateError,
+            ExceptionMessages::indexExceedsMinimumBound(
+                "curve length",
+                curve->length(),
+                2U));
+        return;
+    }
+
     insertEvent(ParamEvent::createSetValueCurveEvent(curve, time, duration), exceptionState);
 }