diff options
author | Peter Hutterer <peter.hutterer@who-t.net> | 2018-07-10 11:17:50 +1000 |
---|---|---|
committer | Peter Hutterer <peter.hutterer@who-t.net> | 2018-07-10 11:17:50 +1000 |
commit | 0909a1a76546284f27fb1b17a6f545a04537cc36 (patch) | |
tree | af6869e11738950d7c32b3ab659c1d0ba3a0bcd5 /src/xf86libinput.c | |
parent | 20bb8d6b9f4375557472dad67b5f8dcf31be27d3 (diff) | |
download | xorg-driver-xf86-input-libinput-0909a1a76546284f27fb1b17a6f545a04537cc36.tar.gz |
draglock: fix memory overwrite during draglock parsing
Passing in the size of the array but using it as "number of elements" inside
the function. Rename a bunch of arguments to avoid this.
https://bugs.freedesktop.org/show_bug.cgi?id=107166
Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
Diffstat (limited to 'src/xf86libinput.c')
-rw-r--r-- | src/xf86libinput.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/xf86libinput.c b/src/xf86libinput.c index 2e950cd..34f1102 100644 --- a/src/xf86libinput.c +++ b/src/xf86libinput.c @@ -5326,7 +5326,7 @@ LibinputInitDragLockProperty(DeviceIntPtr dev, break; case DRAGLOCK_PAIRS: sz = draglock_get_pairs(&driver_data->draglock, - dl_values, sizeof(dl_values)); + dl_values, ARRAY_SIZE(dl_values)); break; default: xf86IDrvMsg(dev->public.devicePrivate, |