diff options
| author | Vinson Lee <vlee@vmware.com> | 2009-12-09 17:34:50 -0800 |
|---|---|---|
| committer | Vinson Lee <vlee@vmware.com> | 2009-12-09 17:34:50 -0800 |
| commit | 444d1f39108ab4419843f19f76c968cef3398bab (patch) | |
| tree | a90edeb601c58de27d533b07ceee3c2267b2b6bd /src/mesa/main/light.c | |
| parent | 34528a34c446afea4442f479713e7f926220f128 (diff) | |
mesa: Fix array out-of-bounds access by _mesa_Lighti.
_mesa_Lighti calls _mesa_Lightiv, which uses the params argument
as an array.
Diffstat (limited to 'src/mesa/main/light.c')
| -rw-r--r-- | src/mesa/main/light.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/mesa/main/light.c b/src/mesa/main/light.c index d4f3bb9026..5150926159 100644 --- a/src/mesa/main/light.c +++ b/src/mesa/main/light.c @@ -288,7 +288,10 @@ _mesa_Lightfv( GLenum light, GLenum pname, const GLfloat *params ) void GLAPIENTRY _mesa_Lighti( GLenum light, GLenum pname, GLint param ) { - _mesa_Lightiv( light, pname, ¶m ); + GLint iparam[4]; + iparam[0] = param; + iparam[1] = iparam[2] = iparam[3] = 0; + _mesa_Lightiv( light, pname, iparam ); } |