pan/decode: Validate attribute/varying buffer pointer

Signed-off-by: Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>

diff --git a/src/panfrost/pandecode/decode.c b/src/panfrost/pandecode/decode.c
index 148be10fdc47bd5a95397825821d8e3c00bc2c82..89537e170fea521e5f8db32ee62a4651c066adf1 100644 (file)
--- a/src/panfrost/pandecode/decode.c
+++ b/src/panfrost/pandecode/decode.c
@@ -1246,6 +1246,9 @@ pandecode_attributes(const struct pandecode_mapped_memory *mem,
                 pandecode_prop("elements = (%s) | %s", a, pandecode_attr_mode(mode));
                 free(a);
 
+                /* Check the pointer */
+                pandecode_validate_buffer(raw_elements, attr[i].size);
+
                 pandecode_prop("shift = %d", attr[i].shift);
                 pandecode_prop("extra_flags = %d", attr[i].extra_flags);
                 pandecode_prop("stride = 0x%" PRIx32, attr[i].stride);