Change History (4)
comment:1 by , 2 years ago
comment:2 by , 2 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
comment:3 by , 2 years ago
| Resolution: | → fixed |
|---|---|
| Status: | assigned → closed |
Fixed at 049e32abe721d4677e829ca6c25c4fb684fe2498.
comment:4 by , 23 months ago
We need to keep an eye out for a CVE for that confidential issue (will check again every few days).
The commit where this was fixed at was here: https://gitlab.freedesktop.org/mesa/mesa/-/commit/d480ca55aa77cc3bc97a904ca72bf13e2b1910ab
util/primconvert: Avoid OoB with improbable draws Detect when the temporary index buffer cannot be generated due to too large primitive count, and simply drop the draw on the floor. Fixes a webgl reachable asan/crash. Cc: mesa-stable Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/12092 Signed-off-by: default avatarRob Clark <robdclark@chromium.org> Reviewed-by: default avatarAlyssa Rosenzweig <alyssa@rosenzweig.io> Reviewed-By: default avatarMike Blumenkrantz <michael.blumenkrantz@gmail.com> Part-of: <!31914> (cherry picked from commit 98ff271c)
Upstream seems to be treating this like a security vulnerability.
Note:
See TracTickets
for help on using tickets.

New features
Bug fixes
#12092Full release notes at: https://docs.mesa3d.org/relnotes/24.2.7.html