From: Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
Date: Tue, 20 Aug 2019 23:02:38 +0000 (-0700)
Subject: pan/decode: Validate attribute/varying buffer pointer
X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=62e667390877a6ea28a1f0e9b0891a09061ffe2b;p=mesa.git

pan/decode: Validate attribute/varying buffer pointer

Signed-off-by: Alyssa Rosenzweig <alyssa.rosenzweig@collabora.com>
---

diff --git a/src/panfrost/pandecode/decode.c b/src/panfrost/pandecode/decode.c
index 148be10fdc4..89537e170fe 100644
--- a/src/panfrost/pandecode/decode.c
+++ b/src/panfrost/pandecode/decode.c
@@ -1246,6 +1246,9 @@ pandecode_attributes(const struct pandecode_mapped_memory *mem,
                 pandecode_prop("elements = (%s) | %s", a, pandecode_attr_mode(mode));
                 free(a);
 
+                /* Check the pointer */
+                pandecode_validate_buffer(raw_elements, attr[i].size);
+
                 pandecode_prop("shift = %d", attr[i].shift);
                 pandecode_prop("extra_flags = %d", attr[i].extra_flags);
                 pandecode_prop("stride = 0x%" PRIx32, attr[i].stride);