From beec1b4175b24d71a0a39482661926a8c76114b5 Mon Sep 17 00:00:00 2001
From: Frediano Ziglio <fziglio@redhat.com>
Date: Thu, 20 Oct 2016 12:36:06 +0100
Subject: [PATCH] display channel: Don't let client set too many surfaces

Limit the n_surfaces argument to avoid overflowing the surfaces array.

Signed-off-by: Frediano Ziglio <fziglio@redhat.com>
Acked-by: Jonathon Jongsma <jjongsma@redhat.com>
---
 server/display-channel.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/display-channel.c b/server/display-channel.c
index 69edd359..0b8d6b50 100644
--- a/server/display-channel.c
+++ b/server/display-channel.c
@@ -1946,7 +1946,7 @@ DisplayChannel* display_channel_new(RedsState *reds,
 #endif
     image_encoder_shared_init(&display->priv->encoder_shared_data);
 
-    display->priv->n_surfaces = n_surfaces;
+    display->priv->n_surfaces = MIN(n_surfaces, NUM_SURFACES);
     display->priv->renderer = RED_RENDERER_INVALID;
 
     ring_init(&display->priv->current_list);