diff options
| author | Maarten Maathuis <madman2003@gmail.com> | 2008-02-13 22:57:09 +0100 |
|---|---|---|
| committer | Maarten Maathuis <madman2003@gmail.com> | 2008-02-13 22:57:09 +0100 |
| commit | 2effa9b36cc47ca3fc0acc21908f5bb132eca3e7 (patch) | |
| tree | b447051acee3c97f2ce60feeeee2430370f23f3c /src/mesa/pipe/nv40 | |
| parent | f71400876b1469ce7b080cbddb5dde4f61ed78b7 (diff) | |
nv40: Avoid a nasty array overflow leading to a corrupt memory pointer.
Diffstat (limited to 'src/mesa/pipe/nv40')
| -rw-r--r-- | src/mesa/pipe/nv40/nv40_fragprog.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/mesa/pipe/nv40/nv40_fragprog.c b/src/mesa/pipe/nv40/nv40_fragprog.c index 714634396d..14897f9798 100644 --- a/src/mesa/pipe/nv40/nv40_fragprog.c +++ b/src/mesa/pipe/nv40/nv40_fragprog.c @@ -716,7 +716,7 @@ nv40_fragprog_translate(struct nv40_context *nv40, assert(imm->Immediate.DataType == TGSI_IMM_FLOAT32); assert(fpc->nr_imm < MAX_IMM); - for (i = 0; i < imm->Immediate.Size; i++) + for (i = 0; i < (imm->Immediate.Size - 1); i++) vals[i] = imm->u.ImmediateFloat32[i].Float; fpc->imm[fpc->nr_imm++] = constant(fpc, -1, vals); } |