glamor: Fix some integer overflow errors.
authorEric Anholt <eric@anholt.net>
Sun, 5 Jan 2014 22:55:15 +0000 (06:55 +0800)
committerEric Anholt <eric@anholt.net>
Mon, 17 Mar 2014 21:30:50 +0000 (14:30 -0700)
commit01e30d2043f5df104947908f14a377dc77896a98
tree828282023a6ad98ed85d4fe0927ec4f12b6fed67
parent20bcda977755559294c3a951f80af2ec861595fc
glamor: Fix some integer overflow errors.

Imagine a nbox that was (UINT_MAX + small number) / (4 * 2 *
sizeof(float)).  We'd malloc a few bytes after the integer overflow,
but glamor_set_normalize_vcoords would write over gigabytes of heap.

Signed-off-by: Eric Anholt <eric@anholt.net>
Reviewed-by: Markus Wick <markus@selfnet.de>
glamor/glamor_fill.c