From: Zhiyi Zhang zzhang@codeweavers.com
ffp_extra_binding is an array of 2. However, "bindings->ffp_extra_binding[shader_type] = binding_idx;" at shader_spirv.c line 748 can write to ffp_extra_binding[5]. --- dlls/wined3d/shader_spirv.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/dlls/wined3d/shader_spirv.c b/dlls/wined3d/shader_spirv.c index 9a1fd1dd3fc..6256a70d5bc 100644 --- a/dlls/wined3d/shader_spirv.c +++ b/dlls/wined3d/shader_spirv.c @@ -44,7 +44,7 @@ struct shader_spirv_resource_bindings size_t binding_base[WINED3D_SHADER_TYPE_COUNT]; enum wined3d_shader_type so_stage;
- uint32_t ffp_extra_binding[2]; + uint32_t ffp_extra_binding[WINED3D_SHADER_TYPE_COUNT]; };
struct shader_spirv_priv