From 62e667390877a6ea28a1f0e9b0891a09061ffe2b Mon Sep 17 00:00:00 2001 From: Alyssa Rosenzweig Date: Tue, 20 Aug 2019 16:02:38 -0700 Subject: [PATCH] pan/decode: Validate attribute/varying buffer pointer Signed-off-by: Alyssa Rosenzweig --- src/panfrost/pandecode/decode.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/panfrost/pandecode/decode.c b/src/panfrost/pandecode/decode.c index 148be10fdc4..89537e170fe 100644 --- a/src/panfrost/pandecode/decode.c +++ b/src/panfrost/pandecode/decode.c @@ -1246,6 +1246,9 @@ pandecode_attributes(const struct pandecode_mapped_memory *mem, pandecode_prop("elements = (%s) | %s", a, pandecode_attr_mode(mode)); free(a); + /* Check the pointer */ + pandecode_validate_buffer(raw_elements, attr[i].size); + pandecode_prop("shift = %d", attr[i].shift); pandecode_prop("extra_flags = %d", attr[i].extra_flags); pandecode_prop("stride = 0x%" PRIx32, attr[i].stride); -- 2.30.2