<html> <head> <base href="https://bugs.freedesktop.org/" /> </head> <body> <div> <a class="bz_bug_link bz_status_NEW " title="NEW - Image compositor can pass invalid coordinates to pixman_fill()" href="https://bugs.freedesktop.org/show_bug.cgi?id=90120#c5">Comment # 5</a> on <a class="bz_bug_link bz_status_NEW " title="NEW - Image compositor can pass invalid coordinates to pixman_fill()" href="https://bugs.freedesktop.org/show_bug.cgi?id=90120">bug 90120</a> from <a class="email" href="mailto:federico@gnome.org" title="Federico Mena-Quintero <federico@gnome.org>"> Federico Mena-Quintero</a> <pre>(In reply to Chris Wilson from <a href="show_bug.cgi?id=90120#c4">comment #4</a>) > I doubt that you have a (uint32_t)-2 tall surface, so there is a much > earlier bug where this manages to evade clipping. I've just made the gnome.org bug visible; it was marked as a security bug, but it's not easily exploitable. I'd love to fix the root cause (Cairo not dealing with big coordinates correctly), but that's a much bigger problem than putting a safety valve. Pixman should do it, or at least document the fact that it doesn't.</pre> </div> <hr> You are receiving this mail because: <ul> <li>You are the QA Contact for the bug.</li> </ul> </body> </html>