mesa/src/mapi
Adam Jackson a1c5cd426c glapi/glx: Add overflow checks to the client-side indirect code
Coverity complains that the computed sizes can lead to negative lengths
passed to memcpy. If that happens we've been handed invalid arguments
anyway, so just bomb out.

The funky "0%s" is because the size string for the variable-length part
of the request is of the form "+ safe_pad() ...", and a unary + would
coerce the result to always be positive, defeating the overflow check.

Signed-off-by: Adam Jackson <ajax@redhat.com>
Reviewed-by: Matt Turner <mattst88@gmail.com>
2016-06-08 14:39:46 -04:00
..
es1api ABI-check: Use more portable bash invocation. 2015-08-27 23:48:43 -07:00
es2api ABI-check: Use more portable bash invocation. 2015-08-27 23:48:43 -07:00
glapi glapi/glx: Add overflow checks to the client-side indirect code 2016-06-08 14:39:46 -04:00
shared-glapi scons: whitespace cleanup 2016-05-25 12:23:12 -06:00
.gitignore
Android.mk
entry.c
entry.h
entry_x86-64_tls.h glapi: Inline x86_64_current_tls(). 2015-09-01 13:23:13 -07:00
entry_x86_tls.h
entry_x86_tsd.h
Makefile.am glapi: Build glapi_gentable.c only on Darwin 2016-01-21 15:04:02 +01:00
Makefile.sources
mapi.c
mapi.h
mapi_abi.py
mapi_glapi.c mapi: Make _glapi_get_stub work with "gl" or "mgl" prefix. 2015-10-02 13:23:18 +01:00
mapi_tmp.h
stub.c
stub.h
table.c
table.h
u_current.c
u_current.h
u_execmem.c
u_execmem.h