summaryrefslogtreecommitdiff
path: root/docs/RELNOTES-3.2.1
diff options
context:
space:
mode:
authorIan Romanick <ian.d.romanick@intel.com>2010-08-02 12:49:20 -0700
committerIan Romanick <ian.d.romanick@intel.com>2010-08-02 13:53:32 -0700
commit955ceef47f2bb8b5005abf11d4a8580c71f19e1b (patch)
tree339e3ab1b2207fafd13f51fb4847f161f1061a49 /docs/RELNOTES-3.2.1
parent7ffe40532f6b22d9b80caeac0fc3b9495619186a (diff)
Keep a local copy of the symbol name in the symbol table
The symbol_header structure that tracks symbols with a particular name may have a different (longer) life time than the symbols it tracks. Not keeping a local copy of the name can lead to use-after-free errors. For example, the following sequence would trigger such an error: char *copy = strdup(name); _mesa_symbol_table_push_scope(st); _mesa_symbol_table_add_symbol(st, 0, name, NULL); _mesa_symbol_table_pop_scope(st); free(name); _mesa_symbol_table_find_symbol(st, 0, copy); With this change, the symbol table keeps a local copy of the name that has the same life time as the symbol_header for that name. This resolves some use-after-free errors with built-in functions in the GLSL compiler.
Diffstat (limited to 'docs/RELNOTES-3.2.1')
0 files changed, 0 insertions, 0 deletions