gdi32: Prevent another possible buffer overflow in get_glyph_outline.

This commit is contained in:
Sam Edwards 2013-04-30 00:41:47 -06:00 committed by Alexandre Julliard
parent a180e5ed00
commit 53ec9b3291
1 changed files with 3 additions and 2 deletions

View File

@ -6362,9 +6362,10 @@ static DWORD get_glyph_outline(GdiFont *incoming_font, UINT glyph, UINT format,
y_shift = height - (src_height / vmul);
dst += x_shift + y_shift * ( pitch / 4 );
while ( src_height )
height = min( height, src_height / vmul );
while ( height-- )
{
for ( x = 0; x < src_width / hmul; x++ )
for ( x = 0; x < width && x < src_width / hmul; x++ )
{
if ( rgb )
{