--- xorg-x11-6.9.0/xc/programs/Xserver/render/mitri.c.cve-2006-1526	2006-04-26 11:17:02.293470474 -0600

+++ xorg-x11-6.9.0/xc/programs/Xserver/render/mitri.c	2006-04-26 11:17:45.147710174 -0600

@@ -145,7 +145,7 @@

     if (npoint < 3)

 	return;

     ntri = npoint - 2;

-    tris = ALLOCATE_LOCAL (ntri & sizeof (xTriangle));

+    tris = ALLOCATE_LOCAL (ntri * sizeof (xTriangle));

     if (!tris)

 	return;

     for (tri = tris; npoint >= 3; npoint--, points++, tri++)

@@ -177,7 +177,7 @@

     if (npoint < 3)

 	return;

     ntri = npoint - 2;

-    tris = ALLOCATE_LOCAL (ntri & sizeof (xTriangle));

+    tris = ALLOCATE_LOCAL (ntri * sizeof (xTriangle));

     if (!tris)

 	return;

     first = points++;