<html>
    <head>
      <base href="https://bugs.freedesktop.org/">
    </head>
    <body><span class="vcard"><a class="email" href="mailto:fdo-bugs@engestrom.ch" title="Eric Engestrom <fdo-bugs@engestrom.ch>"> <span class="fn">Eric Engestrom</span></a>
</span> changed
          <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bounds array access in FindProcIndex"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=106836">bug 106836</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Resolution</td>
           <td>---
           </td>
           <td>FIXED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>NEW
           </td>
           <td>RESOLVED
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bounds array access in FindProcIndex"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=106836#c2">Comment # 2</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bounds array access in FindProcIndex"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=106836">bug 106836</a>
              from <span class="vcard"><a class="email" href="mailto:fdo-bugs@engestrom.ch" title="Eric Engestrom <fdo-bugs@engestrom.ch>"> <span class="fn">Eric Engestrom</span></a>
</span></b>
        <pre>pushed:

commit 41642bdbca007035772fbfdc311f14daa5510d5d
Author: Kyle Brenneman <<a href="mailto:kbrenneman@nvidia.com">kbrenneman@nvidia.com</a>>
Date:   Wed Jun 6 09:08:47 2018 -0600

    egl/glvnd: Fix a segfault in eglGetProcAddress.

    If FindProcIndex in egldispatchstubs.c is called with a name that's less
than
    the first entry in the array, it would end up trying to store an index of
-1 in
    an unsigned integer, wrap around to 2^32, and then crash when it tries to
look
    that up.

    Change FindProcIndex so that it uses bsearch(3) instead of implementing its
own
    binary search, like the GLX equivalent FindGLXFunction does.

    Reviewed-by: Eric Engestrom <<a href="mailto:eric.engestrom@intel.com">eric.engestrom@intel.com</a>></pre>
        </div>
      </p>


      <hr>
      <span>You are receiving this mail because:</span>

      <ul>
          <li>You are the QA Contact for the bug.</li>
          <li>You are the assignee for the bug.</li>
      </ul>
    </body>
</html>