[Mesa-dev] [PATCH 01/13] egl/dri: Avoid out of bounds array access

Emil Velikov emil.l.velikov at gmail.com
Wed Jan 30 16:17:16 UTC 2019


On Mon, 28 Jan 2019 at 18:42, Kevin Strasser <kevin.strasser at intel.com> wrote:
>
> indexConfigAttrib iterates over every index in the dri driver, possibly
> exceeding __DRI_ATTRIB_MAX. In other words, if the dri driver has newer
> attributes libEGL will end up reading from uninitialized memory through
> dri2_to_egl_attribute_map[].
>
> Signed-off-by: Kevin Strasser <kevin.strasser at intel.com>
> Cc: mesa-stable at lists.freedesktop.org

JFYI:
Checking the offending commit (like below) allows us to better track
where the patch is need plus it gives you a few automatic reviewers
;-)

Cc: Chad Versace <chadversary at chromium.org>
Cc: Eric Engestrom <eric at engestrom.ch>
Fixes: cd717cbe1a6 ("egl/dri2: Declare loop vars inside the loop")

Reviewed-by: Emil Velikov <emil.velikov at collabora.com>

Thanks
Emil


More information about the mesa-dev mailing list