https://bugs.freedesktop.org/show_bug.cgi?id=52059

             Bug #: 52059
           Summary: __indirect_glReadPixels USE_XCB path buffer overflow
    Classification: Unclassified
           Product: Mesa
           Version: 8.0
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: GLX
        AssignedTo: mesa-dev@lists.freedesktop.org
        ReportedBy: jcris...@debian.org


Hi,

it seems the USE_XCB path in indirect glReadPixels doesn't take the state set
e.g. with glPixelStorei( GL_PACK_ALIGNMENT, 1 ) into account.  The non-xcb path
uses __glEmptyImage which does use these values, the xcb path does a plain
memcpy which may overwrite the caller's buffer.

-- 
Configure bugmail: https://bugs.freedesktop.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
_______________________________________________
mesa-dev mailing list
mesa-dev@lists.freedesktop.org
http://lists.freedesktop.org/mailman/listinfo/mesa-dev

Reply via email to