mesa/st: Prevent 'end' < 'start' in vbo_exec_DrawRangeElementsBaseVertex()
authorJosé Fonseca <jfonseca@vmware.com>
Wed, 6 Apr 2011 14:10:19 +0000 (15:10 +0100)
committerJosé Fonseca <jfonseca@vmware.com>
Thu, 7 Apr 2011 11:20:06 +0000 (12:20 +0100)
commit23d75936a72b9a9b9e1d04a901a86a75d93dbffb
tree1a4fd3e3a1f4da4c13305488a608b7890caa20ad
parentaa61b1535187129c61dd772471f23c633971665d
mesa/st: Prevent 'end' < 'start' in vbo_exec_DrawRangeElementsBaseVertex()

We adjust 'end' to fit into _MaxElement, but that may result into a 'start'
value bigger than 'end' being passed downstream, causing havoc.

This could be seen with arb_robustness_draw-vbo-bounds, due to an
application bug.
src/mesa/vbo/vbo_exec_array.c