On Thu, 2014-10-09 at 05:42 -0700, Alan Coopersmith wrote:
> ctx_attribs had room for 3 pairs of attributes, but if both flags & reset
> attributes were being returned it was storing 4 pairs in the array.
> 
> Found by Coverity #53442:  Out-of-bounds write
> This could cause an immediate crash or incorrect computations.
> In create_driver_context: Out-of-bounds write to a buffer (CWE-119)
> 
> Signed-off-by: Alan Coopersmith <[email protected]>

Reviewed-by: Adam Jackson <[email protected]>

- ajax

_______________________________________________
[email protected]: X.Org development
Archives: http://lists.x.org/archives/xorg-devel
Info: http://lists.x.org/mailman/listinfo/xorg-devel

Reply via email to