[Mesa-dev] [Bug 81992] mapi_stub->name points to caller memory leads heap-use-after-free bug

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=81992

Emil Velikov <emil.l.velikov at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Emil Velikov <emil.l.velikov at gmail.com> ---
A similar commit landed recently in master and is in mesa 10.5.2. Don't think
that we'll be doing any more 10.3 or 10.4 releases, but if we do this commit
will be in there.

commit 1110113a7f0b6f9b21dd26dee8e95a021041c71c
Author: Mario Kleiner <mario.kleiner.de at gmail.com>
Date:   Thu Mar 12 23:34:12 2015 +0100

    mapi: Make private copies of name strings provided by client.

    glXGetProcAddress("glFoo") ends up in stub_add_dynamic() to

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/mesa-dev/attachments/20150328/4cd5df7a/attachment.html>