Bug 6631

Summary:	6.5: Random crashes due to typo in t_vtx_api.c
Product:	Mesa	Reporter:	aheiner
Component:	Mesa core	Assignee:	mesa-dev
Status:	RESOLVED FIXED	QA Contact:
Severity:	critical
Priority:	highest
Version:	unspecified
Hardware:	All
OS:	All
Whiteboard:
i915 platform:		i915 features:

Description aheiner 2006-04-17 20:34:29 UTC

t_vtx_api.c: _tnl_copy_from_current():

"for (i = _TNL_ATTRIB_POS+1 ; i <= _TNL_ATTRIB_MAX ; i++)"

should be:

"for (i = _TNL_ATTRIB_POS+1 ; i < _TNL_ATTRIB_MAX ; i++)"

Otherwise, the out of bound accesses to various arrays in struct tnl_vtx will do
bad things...

Comment 1 Brian Paul 2006-04-18 00:05:32 UTC

This was already fixed in the trunk.  I've put the fix into the 6.4 branch too.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.