Bug 1672 - __glXQueryContextInfo in libGL can segfault if GLX version > 1.2
Summary: __glXQueryContextInfo in libGL can segfault if GLX version > 1.2
Status: RESOLVED FIXED
Alias: None
Product: xorg
Classification: Unclassified
Component: Server/Ext/GLX (show other bugs)
Version: git
Hardware: x86 (IA32) Linux (All)
: high normal
Assignee: Xorg Project Team
QA Contact:
URL:
Whiteboard:
Keywords:
: 1857 (view as bug list)
Depends on:
Blocks:
 
Reported: 2004-10-19 16:30 UTC by Adam Jackson
Modified: 2004-12-12 01:19 UTC (History)
2 users (show)

See Also:
i915 platform:
i915 features:


Attachments
[FIXED_X11R68x] client-glx-wui.patch (524 bytes, patch)
2004-10-19 16:34 UTC, Adam Jackson
roland.mainz: 6.8-branch+
Details | Splinter Review

Description Adam Jackson 2004-10-19 16:30:38 UTC
the request structure for this case is never allocated, so we write through an
uninitialized pointer.
Comment 1 Adam Jackson 2004-10-19 16:34:38 UTC
Created attachment 1132 [details] [review]
[FIXED_X11R68x] client-glx-wui.patch

trivial patch, fix from Ian Romanick.
Comment 2 Adam Jackson 2004-11-03 11:19:35 UTC
fixed in Mesa CVS, which is where the GLX client code lives now.  this will get
fixed upstream when next we import Mesa.

roland, you'll probably want to make sure Mesa gets updated in 6.8.2, for this
reason among others.
Comment 3 Roland Mainz 2004-11-04 12:06:42 UTC
ajax@nwnk.net wrote:
> roland, you'll probably want to make sure Mesa gets updated in 6.8.2, for this
> reason among others.

Primary reason for me was that the unpatched GLX code looks like a quite good
way to crash an application (even the untested patch is then better than the
original code - it's untested but at least correct in theory :) ...
Comment 4 Roland Mainz 2004-11-04 12:07:32 UTC
Comment on attachment 1132 [details] [review]
[FIXED_X11R68x] client-glx-wui.patch

Nominating for X11R6.8.x as the unpatched code is likely going to crash
applications.
Comment 5 Roland Mainz 2004-11-04 15:22:34 UTC
ajax:
Uhm... did you commit this to Xorg trunk yet ?
Comment 6 Adam Jackson 2004-11-04 15:44:53 UTC
no, i did not.  the GLX client code now lives in Mesa where it belongs, and the
copy of Mesa in extras/ hasn't been synced yet.  would you like me to do so?
Comment 7 Roland Mainz 2004-11-04 15:54:08 UTC
ajax@nwnk.net wrote:
> no, i did not.  the GLX client code now lives in Mesa where it belongs, and 
> the copy of Mesa in extras/ hasn't been synced yet.  would you like me to do 
> so?

Yes, if possible. Just to avoid that someone starts to complain that a patch was
commited to the X11R6.8.x branch without having the same change applied to the
trunk (well, and to get the patch tested in Xorg trunk).
Comment 8 Adam Jackson 2004-11-15 07:19:43 UTC
*** Bug 1857 has been marked as a duplicate of this bug. ***
Comment 9 Adam Jackson 2004-11-15 07:21:38 UTC
applied to HEAD.
Comment 10 Roland Mainz 2004-11-19 07:29:50 UTC
Comment on attachment 1132 [details] [review]
[FIXED_X11R68x] client-glx-wui.patch

Approved for the X11R6.8.x branch in the 2004-11-17 release-wranglers phone
call.
Please don't commit it yourself, I'll handle that once the CVS service is
available again.
Comment 11 Roland Mainz 2004-12-12 20:19:41 UTC
Comment on attachment 1132 [details] [review]
[FIXED_X11R68x] client-glx-wui.patch

Patch checked-in into X11R6.8.x stable branch:

cvs/xorg/xc/ChangeLog,v  <--  ChangeLog
new revision: 1.365.2.38; previous revision: 1.365.2.37
cvs commit: Using deprecated info format strings.  Convert your scripts to use
the new argument format and remove '1's from your info file format strings.
/cvs/xorg/xc/lib/GL/glx/glxcmds.c,v  <--  glxcmds.c
new revision: 1.3.4.1; previous revision: 1.3
cvs commit: Using deprecated info format strings.  Convert your scripts to use
the new argument format and remove '1's from your info file format strings.
Mailing the commit message to xorg-commit@lists.freedesktop.org...


Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.