From: Brian Paul <brianp@vmware.com>
Date: Tue, 26 Jan 2010 19:49:44 +0000 (-0700)
Subject: vbo: if 'end' is out of bounds, clamp it
X-Git-Url: https://git.libre-soc.org/?a=commitdiff_plain;h=cbecb8fc8e85cfafed7fd8fd0e2dd1143efcf62b;p=mesa.git

vbo: if 'end' is out of bounds, clamp it

If we determine that the 'end' parameter to glDrawElements() is out of
bounds, clamp it to the max legal index value.
---

diff --git a/src/mesa/vbo/vbo_exec_array.c b/src/mesa/vbo/vbo_exec_array.c
index f4553825921..bd2fccdba14 100644
--- a/src/mesa/vbo/vbo_exec_array.c
+++ b/src/mesa/vbo/vbo_exec_array.c
@@ -748,6 +748,10 @@ vbo_exec_DrawRangeElementsBaseVertex(GLenum mode,
           */
       }
 #endif
+
+      /* Set 'end' to the max possible legal value */
+      assert(ctx->Array.ArrayObj->_MaxElement >= 1);
+      end = ctx->Array.ArrayObj->_MaxElement - 1;
    }
    else if (0) {
       _mesa_printf("glDraw[Range]Elements{,BaseVertex}"