summaryrefslogtreecommitdiffstats
path: root/src/glsl/lower_packed_varyings.cpp
diff options
context:
space:
mode:
authorBrian Paul <[email protected]>2015-04-16 15:29:18 -0600
committerBrian Paul <[email protected]>2015-04-22 08:58:05 -0600
commit31667e6237d30188d0b29e17f5b9892f10c0d83a (patch)
treeb38ae8b06be273ad3f9bff5ace9d9dbb3c22073f /src/glsl/lower_packed_varyings.cpp
parentbd4dbdfa519362f74263a2c277a3b4be841acd06 (diff)
glsl: rewrite glsl_type::record_key_hash() to avoid buffer overflow
This should be more efficient than the previous snprintf() solution. But more importantly, it avoids a buffer overflow bug that could result in crashes or unpredictable results when processing very large interface blocks. For the app in question, key->length = 103 for some interfaces. The check if size >= sizeof(hash_key) was insufficient to prevent overflows of the hash_key[128] array because it didn't account for the terminating zero. In this case, this caused the call to hash_table_string_hash() to return different results for identical inputs, and then shader linking failed. This new solution also takes all structure fields into account instead of just the first 15 when sizeof(pointer)==8. Cc: [email protected] Reviewed-by: Ian Romanick <[email protected]>
Diffstat (limited to 'src/glsl/lower_packed_varyings.cpp')
0 files changed, 0 insertions, 0 deletions