Change History (4)
comment:1 by , 5 months ago
comment:2 by , 4 months ago
Owner: | changed from | to
---|---|
Status: | new → assigned |
comment:3 by , 4 months ago
Resolution: | → fixed |
---|---|
Status: | assigned → closed |
Fixed at 049e32abe721d4677e829ca6c25c4fb684fe2498.
comment:4 by , 4 months ago
We need to keep an eye out for a CVE for that confidential issue (will check again every few days).
The commit where this was fixed at was here: https://gitlab.freedesktop.org/mesa/mesa/-/commit/d480ca55aa77cc3bc97a904ca72bf13e2b1910ab
util/primconvert: Avoid OoB with improbable draws Detect when the temporary index buffer cannot be generated due to too large primitive count, and simply drop the draw on the floor. Fixes a webgl reachable asan/crash. Cc: mesa-stable Closes: https://gitlab.freedesktop.org/mesa/mesa/-/issues/12092 Signed-off-by: default avatarRob Clark <robdclark@chromium.org> Reviewed-by: default avatarAlyssa Rosenzweig <alyssa@rosenzweig.io> Reviewed-By: default avatarMike Blumenkrantz <michael.blumenkrantz@gmail.com> Part-of: <!31914> (cherry picked from commit 98ff271c)
Upstream seems to be treating this like a security vulnerability.
Note:
See TracTickets
for help on using tickets.
New features
Bug fixes
#12092
Full release notes at: https://docs.mesa3d.org/relnotes/24.2.7.html