Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2e8ca9d0 authored by Jesse Hall's avatar Jesse Hall
Browse files

libagl: Fix buffer read overrun in eglCreatePbufferSurface

The code was assuming that EGL_NONE==0, which isn't true.

Bug: 23403170
Change-Id: Ic1eccdef086b4d610bd78dbb6b2ae883c91dc322
parent 110ddef1
Loading
Loading
Loading
Loading
+1 −1
Original line number Diff line number Diff line
@@ -1373,7 +1373,7 @@ static EGLSurface createPbufferSurface(EGLDisplay dpy, EGLConfig config,

    int32_t w = 0;
    int32_t h = 0;
    while (attrib_list[0]) {
    while (attrib_list[0] != EGL_NONE) {
        if (attrib_list[0] == EGL_WIDTH)  w = attrib_list[1];
        if (attrib_list[0] == EGL_HEIGHT) h = attrib_list[1];
        attrib_list+=2;