diff --git a/src/vrend_renderer.c b/src/vrend_renderer.c index 00b61eb..32e2e7d 100644 --- a/src/vrend_renderer.c +++ b/src/vrend_renderer.c @@ -1656,6 +1656,9 @@ int vrend_create_vertex_elements_state(struct vrend_context *ctx, if (!v) return ENOMEM; + if (num_elements > PIPE_MAX_ATTRIBS) + return EINVAL; + v->count = num_elements; for (i = 0; i < num_elements; i++) { memcpy(&v->elements[i].base, &elements[i], sizeof(struct pipe_vertex_element));