mirror of
https://gitlab.freedesktop.org/mesa/mesa.git
synced 2026-06-08 01:38:16 +02:00
e5439bf4aa
Since the packing functions generated by csbgen use a void pointer for the buffer in which to pack, it's possible to easily write out of bounds. This commits attempts to reduce the chances by having the pack macro check that the pointer passed points to an element sized equally to the state word being packed. Catching these errors earlier. As can be seen in this commit, there already was a case of this: "pds_ctrl". The word size is meant to be 64 bits but the pointer was pointing to a 32 bit field. Although it's fine for the word size to be smaller than the storage pointed to by the pointer, this is not allowed just to be extra careful. Signed-off-by: Karmjit Mahil <Karmjit.Mahil@imgtec.com> Reviewed-by: Frank Binns <frank.binns@imgtec.com> Part-of: <https://gitlab.freedesktop.org/mesa/mesa/-/merge_requests/15687> |
||
|---|---|---|
| .. | ||
| pds | ||
| usc/programs | ||
| winsys | ||
| meson.build | ||
| pvr_blit.c | ||
| pvr_bo.c | ||
| pvr_bo.h | ||
| pvr_cmd_buffer.c | ||
| pvr_csb.c | ||
| pvr_csb.h | ||
| pvr_descriptor_set.c | ||
| pvr_device.c | ||
| pvr_formats.c | ||
| pvr_formats.h | ||
| pvr_hw_pass.c | ||
| pvr_hw_pass.h | ||
| pvr_image.c | ||
| pvr_job_common.c | ||
| pvr_job_common.h | ||
| pvr_job_compute.c | ||
| pvr_job_compute.h | ||
| pvr_job_context.c | ||
| pvr_job_context.h | ||
| pvr_job_render.c | ||
| pvr_job_render.h | ||
| pvr_limits.h | ||
| pvr_pass.c | ||
| pvr_pipeline.c | ||
| pvr_pipeline_cache.c | ||
| pvr_private.h | ||
| pvr_query.c | ||
| pvr_queue.c | ||
| pvr_shader.c | ||
| pvr_shader.h | ||
| pvr_tex_state.c | ||
| pvr_tex_state.h | ||
| pvr_wsi.c | ||
| vk_format.h | ||