[Mesa-dev] [Bug 52059] New: __indirect_glReadPixels USE_XCB path buffer overflow

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=52059

             Bug #: 52059
           Summary: __indirect_glReadPixels USE_XCB path buffer overflow
    Classification: Unclassified
           Product: Mesa
           Version: 8.0
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: GLX
        AssignedTo: mesa-dev at lists.freedesktop.org
        ReportedBy: jcristau at debian.org


Hi,

it seems the USE_XCB path in indirect glReadPixels doesn't take the state set
e.g. with glPixelStorei( GL_PACK_ALIGNMENT, 1 ) into account.  The non-xcb path
uses __glEmptyImage which does use these values, the xcb path does a plain
memcpy which may overwrite the caller's buffer.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.