Skip to content

glsl: Fix out of bounds read in shader_cache_read_program_metadata

Kenneth Graunke requested to merge kwg/mesa:vg-xfb-cache into master

The VaryingNames array has NumVaryings entries. But BufferStride is a small array of MAX_FEEDBACK_BUFFERS (4) entries. Programs with more than 4 varyings would read out of bounds.

Fixes valgrind errors in KHR-GL45.transform_feedback.linking_errors_test.

Fixes: 6d830940 glsl/shader_cache: Allow shader cache usage with transform feedback

Merge request reports

Loading