Changeset 39528 in vbox for trunk/src/VBox/Additions/WINNT

Timestamp:

Dec 5, 2011 12:59:05 PM (13 years ago)

Author:

vboxsync

Message:

wddm: vboxWddmSwapchainCtxEscape fix

File:

• trunk/src/VBox/Additions/WINNT/Graphics/Video/mp/wddm/VBoxMPMisc.cpp (modified) (1 diff)

trunk/src/VBox/Additions/WINNT/Graphics/Video/mp/wddm/VBoxMPMisc.cpp

@@ -414 +414 @@
         if (pSwapchainInfo->SwapchainInfo.cAllocs)
         {
+            /* ensure we do not overflow the 32bit buffer size value */
+            if (VBOXWDDM_ARRAY_MAXELEMENTSU32(PVBOXWDDM_ALLOCATION) < pSwapchainInfo->SwapchainInfo.cAllocs)
+            {
+                WARN(("number of allocations passed in too big (%d), max is (%d)", pSwapchainInfo->SwapchainInfo.cAllocs, VBOXWDDM_ARRAY_MAXELEMENTSU32(PVBOXWDDM_ALLOCATION)));
+                Status = STATUS_INVALID_PARAMETER;
+                break;
+            }
+
             apAlloc = (PVBOXWDDM_ALLOCATION *)vboxWddmMemAlloc(sizeof (PVBOXWDDM_ALLOCATION) * pSwapchainInfo->SwapchainInfo.cAllocs);
             Assert(apAlloc);