=?UTF-8?Q?J=C3=B3zef=20Kucia=20?=: wined3d: Prevent possible integer overflow in buffer_invalidate_bo_range().
Alexandre Julliard
julliard at wine.codeweavers.com
Mon Mar 21 11:21:11 CDT 2016
Module: wine
Branch: master
Commit: 446ee50b904f9caa8556de6cc8607bea6f9a49d7
URL: http://source.winehq.org/git/wine.git/?a=commit;h=446ee50b904f9caa8556de6cc8607bea6f9a49d7
Author: Józef Kucia <jkucia at codeweavers.com>
Date: Sun Mar 20 23:15:30 2016 +0100
wined3d: Prevent possible integer overflow in buffer_invalidate_bo_range().
Signed-off-by: Józef Kucia <jkucia at codeweavers.com>
Signed-off-by: Henri Verbeet <hverbeet at codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard at winehq.org>
---
dlls/wined3d/buffer.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/dlls/wined3d/buffer.c b/dlls/wined3d/buffer.c
index 70a7a20..3d4ab55 100644
--- a/dlls/wined3d/buffer.c
+++ b/dlls/wined3d/buffer.c
@@ -47,7 +47,7 @@ static void buffer_invalidate_bo_range(struct wined3d_buffer *buffer, unsigned i
if (!offset && (!size || size == buffer->resource.size))
goto invalidate_all;
- if (offset > buffer->resource.size || offset + size > buffer->resource.size)
+ if (offset > buffer->resource.size || size > buffer->resource.size - offset)
{
WARN("Invalid range specified, invalidating entire buffer.\n");
goto invalidate_all;
More information about the wine-cvs
mailing list