The size of the X-Server pScreenPriv->PreAllocIndices array allocated within xf86HandleColormaps() is given by the given maxColors argument, but the range of indices by which the PreAllocIndices array is indexed in routines like CMapReinstallMap() seems to be up to 1023 on a 10 bpc / depth 30 screen, leading to an out-of-bounds access and server crash. Raising maxColors to 1024 fixes the crash at server startup with X-Screen color depth 30. Signed-off-by: Mario Kleiner <mario.kleiner.de at gmail.com> --- src/drmmode_display.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/drmmode_display.c b/src/drmmode_display.c index 7ad3235..67db86e 100644 --- a/src/drmmode_display.c +++ b/src/drmmode_display.c @@ -2730,8 +2730,9 @@ Bool drmmode_setup_colormap(ScreenPtr pScreen, ScrnInfoPtr pScrn) "Initializing kms color map\n"); if (!miCreateDefColormap(pScreen)) return FALSE; + /* all radeons support 10 bit CLUTs */ - if (!xf86HandleColormaps(pScreen, 256, 10, + if (!xf86HandleColormaps(pScreen, 1024, 10, NULL, NULL, CMAP_PALETTED_TRUECOLOR #if 0 /* This option messes up text mode! (eich at suse.de) */ -- 2.7.4
