<html>
    <head>
      <base href="https://bugs.freedesktop.org/" />
    </head>
    <body><span class="vcard"><a class="email" href="mailto:b.harrington@samsung.com" title="Bryce Harrington <b.harrington@samsung.com>"> <span class="fn">Bryce Harrington</span></a>
</span> changed
              <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bound access in struct pattern -> type"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=91266">bug 91266</a>
          <br>
             <table border="1" cellspacing="0" cellpadding="8">
          <tr>
            <th>What</th>
            <th>Removed</th>
            <th>Added</th>
          </tr>

         <tr>
           <td style="text-align:right;">Status</td>
           <td>NEW
           </td>
           <td>RESOLVED
           </td>
         </tr>

         <tr>
           <td style="text-align:right;">Resolution</td>
           <td>---
           </td>
           <td>FIXED
           </td>
         </tr></table>
      <p>
        <div>
            <b><a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bound access in struct pattern -> type"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=91266#c1">Comment # 1</a>
              on <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bound access in struct pattern -> type"
   href="https://bugs.freedesktop.org/show_bug.cgi?id=91266">bug 91266</a>
              from <span class="vcard"><a class="email" href="mailto:b.harrington@samsung.com" title="Bryce Harrington <b.harrington@samsung.com>"> <span class="fn">Bryce Harrington</span></a>
</span></b>
        <pre>Thanks, applied.

commit 498fc2fbe31682754f1aa3864b764229d0b6838c
Author: Ashim <<a href="mailto:ashim.shah@samsung.com">ashim.shah@samsung.com</a>>
Date:   Thu Jul 9 10:43:30 2015 +0530

    Fix out of bound access in struct pattern->type

    The pattern structure is hardcoded to hold 7 elements, yet the
    pattern_names array in cairo-surface-observer.c is initialized with 8
    strings.  This causes a crash in print_array at line 1587 when it tries
    to access the 8th member.

    Hence changed the 'type' array from type[7] to type[8] to avoid out of
    bound access.

    Fixes: <a class="bz_bug_link 
          bz_status_RESOLVED  bz_closed"
   title="RESOLVED FIXED - Out of bound access in struct pattern -> type"
   href="show_bug.cgi?id=91266">https://bugs.freedesktop.org/show_bug.cgi?id=91266</a>
    Signed-off-by: Ashim <<a href="mailto:ashim.shah@samsung.com">ashim.shah@samsung.com</a>>
    Reviewed-by: Bryce Harrington <<a href="mailto:bryce@osg.samsung.com">bryce@osg.samsung.com</a>></pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are the QA Contact for the bug.</li>
      </ul>
    </body>
</html>