Search
j0ke.net Open Build Service
>
Projects
>
multimedia
:
EL6
>
gdk-pixbuf
> gdk-pixbuf-0.22.0-bmploop.patch
Sign Up
|
Log In
Username
Password
Cancel
Overview
Repositories
Revisions
Requests
Users
Advanced
Attributes
Meta
File gdk-pixbuf-0.22.0-bmploop.patch of Package gdk-pixbuf
--- gdk-pixbuf-0.22.0/gdk-pixbuf/io-bmp.c.bmploop 2004-08-20 14:18:30.178162560 -0400 +++ gdk-pixbuf-0.22.0/gdk-pixbuf/io-bmp.c 2004-08-20 14:18:42.997213768 -0400 @@ -899,8 +899,18 @@ guchar c; gint idx; - if (context->compr.y >= context->Header.height) + /* context->compr.y might be past the last line because we are + * on padding past the end of a valid data, or we might have hit + * out-of-bounds data. Either way we just eat-and-ignore the + * rest of the file. Doing the check only here and not when + * we change y below is fine since BufferSize is always 2 here + * and the BMP file format always starts new data on 16-bit + * boundaries. + */ + if (context->compr.y >= context->Header.height) { + context->BufferDone = 0; return TRUE; + } y = context->compr.y;