Mesa (10.1): glapi: Avoid heap corruption in _glapi_table

Jeremy Huddleston jeremyhu at kemper.freedesktop.org
Tue May 20 08:39:51 UTC 2014


Module: Mesa
Branch: 10.1
Commit: ea5839c8fef1fbaee8a8a5a6389f35dd537dccfc
URL:    http://cgit.freedesktop.org/mesa/mesa/commit/?id=ea5839c8fef1fbaee8a8a5a6389f35dd537dccfc

Author: Jeremy Huddleston Sequoia <jeremyhu at apple.com>
Date:   Tue May 20 01:37:58 2014 -0700

glapi: Avoid heap corruption in _glapi_table

Signed-off-by: Jeremy Huddleston Sequoia <jeremyhu at apple.com>
Reviewed-by: Chia-I Wu <olv at lunarg.com>
(cherry picked from commit ff5456d1acf6f627a6837be3f3f37c6a268c9e8e)

---

 src/mapi/glapi/gen/gl_gentable.py |    2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/mapi/glapi/gen/gl_gentable.py b/src/mapi/glapi/gen/gl_gentable.py
index 35dddc7..d45a5e0 100644
--- a/src/mapi/glapi/gen/gl_gentable.py
+++ b/src/mapi/glapi/gen/gl_gentable.py
@@ -113,7 +113,7 @@ __glapi_gentable_set_remaining_noop(struct _glapi_table *disp) {
 
 struct _glapi_table *
 _glapi_create_table_from_handle(void *handle, const char *symbol_prefix) {
-    struct _glapi_table *disp = calloc(1, sizeof(struct _glapi_table));
+    struct _glapi_table *disp = calloc(1, _glapi_get_dispatch_table_size() * sizeof(_glapi_proc));
     char symboln[512];
 
     if(!disp)




More information about the mesa-commit mailing list