kossLAN/wry
1
0
Fork 0
forked from wry/wry
Code Pull requests Activity

shm: limit data accessed by ClientMemOffset

Browse source
This commit is contained in:
Julian Orth 2026-02-27 20:06:22 +01:00
parent 3f70242d32
commit 518095c7c2
7 changed files with 24 additions and 28 deletions
Download patch file Download diff file Expand all files Collapse all files

5
src/ifs/wl_buffer.rs
View file

@ -147,7 +147,8 @@ impl WlBuffer {
if required > mem.len() as u64 {
return Err(WlBufferError::OutOfBounds);
}
let mem = Rc::new(mem.offset(offset));
let size = bytes as usize;
let mem = Rc::new(mem.offset(offset, size));
let min_row_size = width as u64 * format.bpp as u64;
if (stride as u64) < min_row_size {
return Err(WlBufferError::StrideTooSmall);
@ -155,7 +156,7 @@ impl WlBuffer {
let udmabuf_impossible = !mem.pool().is_sealed_memfd();
let dmabuf_buffer_params = match udmabuf {
None => DmabufBufferParams {
size: bytes as usize,
size,
udmabuf: None,
udmabuf_offset: 0,
udmabuf_size: 0,