From 8a6930c138807cb04e2ef738cebe907877eaf292 Mon Sep 17 00:00:00 2001 From: Simon Ser Date: Tue, 8 Dec 2020 23:35:05 +0100 Subject: render/drm_format_set: assert len <= cap when duplicating --- render/drm_format_set.c | 1 + 1 file changed, 1 insertion(+) diff --git a/render/drm_format_set.c b/render/drm_format_set.c index b3e8648e..a4c31494 100644 --- a/render/drm_format_set.c +++ b/render/drm_format_set.c @@ -128,6 +128,7 @@ bool wlr_drm_format_set_add(struct wlr_drm_format_set *set, uint32_t format, } struct wlr_drm_format *wlr_drm_format_dup(const struct wlr_drm_format *format) { + assert(format->len <= format->cap); size_t format_size = sizeof(struct wlr_drm_format) + format->cap * sizeof(format->modifiers[0]); struct wlr_drm_format *duped_format = malloc(format_size); -- cgit v1.2.3