Mesa (master): tgsi: fix buffer overflow

Dave Airlie airlied at kemper.freedesktop.org
Wed Apr 13 01:58:31 UTC 2016


Module: Mesa
Branch: master
Commit: b89708f95fafc458cc79bc210407b723a0f0f78c
URL:    http://cgit.freedesktop.org/mesa/mesa/commit/?id=b89708f95fafc458cc79bc210407b723a0f0f78c

Author: Thomas Hindoe Paaboel Andersen <phomes at gmail.com>
Date:   Wed Apr 13 03:06:05 2016 +0200

tgsi: fix buffer overflow

Increase r to four channels as rgba is written to it
Reviewed-by: Edward O'Callaghan <eocallaghan at alterapraxis.com>

Signed-off-by: Dave Airlie <airlied at redhat.com>

---

 src/gallium/auxiliary/tgsi/tgsi_exec.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gallium/auxiliary/tgsi/tgsi_exec.c b/src/gallium/auxiliary/tgsi/tgsi_exec.c
index fb51051..41dd0f0 100644
--- a/src/gallium/auxiliary/tgsi/tgsi_exec.c
+++ b/src/gallium/auxiliary/tgsi/tgsi_exec.c
@@ -4011,7 +4011,7 @@ static void
 exec_atomop_buf(struct tgsi_exec_machine *mach,
                 const struct tgsi_full_instruction *inst)
 {
-   union tgsi_exec_channel r[3];
+   union tgsi_exec_channel r[4];
    union tgsi_exec_channel value[4], value2[4];
    float rgba[TGSI_NUM_CHANNELS][TGSI_QUAD_SIZE];
    float rgba2[TGSI_NUM_CHANNELS][TGSI_QUAD_SIZE];




More information about the mesa-commit mailing list