Hi Michel,
> > > glamor_compute_transform_clipped_regions() uses a temporary box32
> > > internally which is copied back to a box16 to init the regions16,
> > > thus causing a potential overflow.
> > >
> > > If an overflow occurs, the given region is invalid and the pixmap
> > > init region will
Hi Michel,
> > glamor_compute_transform_clipped_regions() uses a temporary box32
> > internally which is copied back to a box16 to init the regions16,
> > thus causing a potential overflow.
> >
> > If an overflow occurs, the given region is invalid and the pixmap
> > init region will fail.
> >
On 26/07/17 04:51 PM, Olivier Fourdan wrote:
> glamor_compute_transform_clipped_regions() uses a temporary box32
> internally which is copied back to a box16 to init the regions16,
> thus causing a potential overflow.
>
> If an overflow occurs, the given region is invalid and the pixmap
> init