Changeset 79679 in vbox for trunk/src/VBox

Timestamp:

Jul 10, 2019 6:43:30 PM (6 years ago)

Author:

vboxsync

svn:sync-xref-src-repo-rev:

132002

Message:

GuestHost/OpenGL: Enforce upper limit program size and free copy on error case

File:

• trunk/src/VBox/GuestHost/OpenGL/state_tracker/state_program.c (modified) (2 diffs)

trunk/src/VBox/GuestHost/OpenGL/state_tracker/state_program.c

@@ -400 +400 @@
     }
 
+    if (len > _1M)
+    {
+        crStateError(pState, __LINE__, __FILE__, GL_INVALID_VALUE,
+                                 "glLoadProgramNV(len > 1MB)");
+        return;
+    }
+
     prog = GetProgram(p, target, id);
 
@@ -425 +432 @@
             crStateError(pState, __LINE__, __FILE__, GL_INVALID_VALUE, "glLoadProgramNV");
             crDebug("program = (%s)\n",program);
+            crFree(progCopy);
             return;
     }