diff options
| author | Robert Morell <rmorell@nvidia.com> | 2010-01-21 12:38:47 -0800 |
|---|---|---|
| committer | Keith Packard <keithp@keithp.com> | 2010-01-29 18:11:14 -0800 |
| commit | 8d6b1838330625b758ebc55bb0df1b425c5cefaf (patch) | |
| tree | 04670cdfe4b150cf6f9e5638ed5f436e6665c516 /render | |
| parent | 5e81078cf56aabbf6551d96d312c7840ba9370ae (diff) | |
Render: Fix request size verification
RenderSetPictureClipRectangles and the Xinerama version of
RenderChangePicture were using the wrong structure types for request
size verification.
Signed-off-by: Robert Morell <rmorell@nvidia.com>
Reviewed-by: Aaron Plattner <aplattner@nvidia.com>
Signed-off-by: Keith Packard <keithp@keithp.com>
Diffstat (limited to 'render')
| -rw-r--r-- | render/render.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/render/render.c b/render/render.c index 77e5e0396..575bd9f9c 100644 --- a/render/render.c +++ b/render/render.c @@ -656,7 +656,7 @@ ProcRenderSetPictureClipRectangles (ClientPtr client) if (!pPicture->pDrawable) return BadDrawable; - nr = (client->req_len << 2) - sizeof(xRenderChangePictureReq); + nr = (client->req_len << 2) - sizeof(xRenderSetPictureClipRectanglesReq); if (nr & 4) return BadLength; nr >>= 3; @@ -2728,7 +2728,7 @@ PanoramiXRenderChangePicture (ClientPtr client) int result = Success, j; REQUEST(xRenderChangePictureReq); - REQUEST_AT_LEAST_SIZE(xChangeWindowAttributesReq); + REQUEST_AT_LEAST_SIZE(xRenderChangePictureReq); VERIFY_XIN_PICTURE(pict, stuff->picture, client, DixWriteAccess, RenderErrBase + BadPicture); |