mesa: fix buffer overrun in SavedObj texture obj array
Fixes: 3be42f9c ("mesa: rewrite glPushAttrib/glPopAttrib to get rid of malloc")
Closes: #5621 (closed)
Fixes: 3be42f9c ("mesa: rewrite glPushAttrib/glPopAttrib to get rid of malloc")
Closes: #5621 (closed)