diff options
author | Vinson Lee <vlee@vmware.com> | 2009-12-09 17:34:50 -0800 |
---|---|---|
committer | Vinson Lee <vlee@vmware.com> | 2009-12-09 17:34:50 -0800 |
commit | 444d1f39108ab4419843f19f76c968cef3398bab (patch) | |
tree | a90edeb601c58de27d533b07ceee3c2267b2b6bd | |
parent | 34528a34c446afea4442f479713e7f926220f128 (diff) | |
download | external_mesa3d-444d1f39108ab4419843f19f76c968cef3398bab.zip external_mesa3d-444d1f39108ab4419843f19f76c968cef3398bab.tar.gz external_mesa3d-444d1f39108ab4419843f19f76c968cef3398bab.tar.bz2 |
mesa: Fix array out-of-bounds access by _mesa_Lighti.
_mesa_Lighti calls _mesa_Lightiv, which uses the params argument
as an array.
-rw-r--r-- | src/mesa/main/light.c | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/src/mesa/main/light.c b/src/mesa/main/light.c index d4f3bb9..5150926 100644 --- a/src/mesa/main/light.c +++ b/src/mesa/main/light.c @@ -288,7 +288,10 @@ _mesa_Lightfv( GLenum light, GLenum pname, const GLfloat *params ) void GLAPIENTRY _mesa_Lighti( GLenum light, GLenum pname, GLint param ) { - _mesa_Lightiv( light, pname, ¶m ); + GLint iparam[4]; + iparam[0] = param; + iparam[1] = iparam[2] = iparam[3] = 0; + _mesa_Lightiv( light, pname, iparam ); } |