[Bug 88882] hud_context.c: possible NULL-pointer dereference

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Fri Jan 30 13:11:42 PST 2015


https://bugs.freedesktop.org/show_bug.cgi?id=88882

            Bug ID: 88882
           Summary: hud_context.c: possible NULL-pointer dereference
           Product: Mesa
           Version: git
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: Drivers/Gallium/radeonsi
          Assignee: dri-devel at lists.freedesktop.org
          Reporter: xypron.glpk at gmx.de
        QA Contact: dri-devel at lists.freedesktop.org

In
mesa/src/gallium/auxiliary/hud/hud_context.c
we find the following code

      case ',':
         env++;
         y += height + hud->font.glyph_height * (pane->num_graphs + 2);

         if (pane && pane->num_graphs) {
            LIST_ADDTAIL(&pane->head, &hud->pane_list);
            pane = NULL;
         }
         break;

pane is checked for being NULL. So obviously we expect NULL as possible value.
But we use pane->num_graphs before the check. This is possibly a NULL-pointer
dereference.

The problem was indicated by cppcheck
http://cppcheck.sourceforge.net/

Best regards

Heinrich Schuchardt

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/dri-devel/attachments/20150130/d622967f/attachment.html>


More information about the dri-devel mailing list