Changeset 76787 in vbox for trunk/src/VBox/HostServices/SharedOpenGL/unpacker/unpack_texture.c

Timestamp:

Jan 11, 2019 8:00:15 PM (6 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

128124

Message:

3D: Parameters validation corrected, bugref:9327

File:

• trunk/src/VBox/HostServices/SharedOpenGL/unpacker/unpack_texture.c (modified) (1 diff)

trunk/src/VBox/HostServices/SharedOpenGL/unpacker/unpack_texture.c

@@ -328 +328 @@
     const GLuint *textures = DATA_POINTER( 12, const GLuint );
 
-    if (n > UINT32_MAX / sizeof(GLuint) / 4 || !DATA_POINTER_CHECK(20 + n * sizeof(GLuint)))
+    if (n <= 0 || n >= INT32_MAX / sizeof(GLuint) / 4 || !DATA_POINTER_CHECK(20 + n * sizeof(GLuint)))
     {
         crError("crUnpackExtendAreTexturesResident: %d is out of range", n);