mirror of
https://gitlab.freedesktop.org/mesa/mesa.git
synced 2026-05-05 16:08:04 +02:00
glx: fix incorrect array stack memory allocation
The array stack space wasn't allocated to the proper size. Fixes out of bounds memory writes when the client/array stack depth exceeds one. See fd.o bug 26768.
This commit is contained in:
parent
61482ddc1c
commit
69334d6784
1 changed files with 2 additions and 1 deletions
|
|
@ -291,7 +291,8 @@ __glXInitVertexArrayState(__GLXcontext * gc)
|
|||
|
||||
arrays->stack_index = 0;
|
||||
arrays->stack = malloc(sizeof(struct array_stack_state)
|
||||
* arrays->num_arrays);
|
||||
* arrays->num_arrays
|
||||
* __GL_CLIENT_ATTRIB_STACK_DEPTH);
|
||||
}
|
||||
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue