WebGLRenderingContextBase::framebufferTexture2D doesn't seem to be validating the texture's target against the framebuffer's attachment point. This could be allowing the WebGL implementation's notion of the attached texture to get out-of-sync with respect to the underlying graphics driver.