mirror of
https://github.com/RGBCube/serenity
synced 2025-05-31 13:38:11 +00:00
![]() This code attempts to copy the `Protocol::Resource3DSpecification` struct into request, starting at `Protocol::ResourceCreate3D::target` member of the `Protocol::ResourceCreate3D` struct. The problem is that the `Protocol::Resource3DSpecification` struct does not having the trailing `u32 padding` that the `ResourceCreate3D` struct has. Leading to memcopy overrunning the struct and corrupting 32 bits of data trailing the struct. Found by SonarCloud: - Memory copy function overflows the destination buffer. |
||
---|---|---|
.. | ||
Bochs | ||
Console | ||
Intel | ||
VGA | ||
VirtIOGPU | ||
Definitions.h | ||
FramebufferDevice.cpp | ||
FramebufferDevice.h | ||
GenericFramebufferDevice.cpp | ||
GenericFramebufferDevice.h | ||
GenericGraphicsAdapter.h | ||
GraphicsManagement.cpp | ||
GraphicsManagement.h | ||
VGACompatibleAdapter.h |