wined3d: Prevent possible integer overflow in buffer_invalidate_bo_range().

Signed-off-by: Józef Kucia <jkucia@codeweavers.com> Signed-off-by: Henri Verbeet <hverbeet@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

wined3d: Prevent possible integer overflow in buffer_invalidate_bo_range().
446ee50b · Józef Kucia · Alexandre Julliard · 654337e1 · 446ee50b
Commit 446ee50b authored Mar 20, 2016 by Józef Kucia Committed by Alexandre Julliard Mar 22, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

buffer.c dlls/wined3d/buffer.c +1 -1

No files found.
--- a/dlls/wined3d/buffer.c
+++ b/dlls/wined3d/buffer.c
@@ -47,7 +47,7 @@ static void buffer_invalidate_bo_range(struct wined3d_buffer *buffer, unsigned i
    if (!offset && (!size || size == buffer->resource.size))
        goto invalidate_all;

-    if (offset > buffer->resource.size || offset + size > buffer->resource.size)
+    if (offset > buffer->resource.size || size > buffer->resource.size - offset)
    {
        WARN("Invalid range specified, invalidating entire buffer.\n");
        goto invalidate_all;