From 1dcb4448c12e771898b37818498ef9348a37189e Mon Sep 17 00:00:00 2001 From: David Turner Date: Fri, 6 Apr 2007 08:19:04 +0000 Subject: [PATCH] fixed a memory buffer overwrite bug. Damn !! --- ChangeLog | 5 +++++ src/base/ftbitmap.c | 4 ++-- 2 files changed, 7 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index f356f81e3..d694fe7f1 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,8 @@ +2007-04-06 David Turner + + * src/base/ftbimap.c (ft_bitmap_assure_buffer): fixed buffer-overwrite bug + + 2007-04-04 Werner Lemberg * Version 2.3.3 released. diff --git a/src/base/ftbitmap.c b/src/base/ftbitmap.c index 916765392..4c1cdf218 100644 --- a/src/base/ftbitmap.c +++ b/src/base/ftbitmap.c @@ -149,15 +149,15 @@ if ( bit_last < bit_width ) { FT_Byte* line = bitmap->buffer + ( bit_last >> 3 ); + FT_Byte* end = bitmap->buffer + pitch; FT_Int shift = bit_last & 7; FT_UInt mask = 0xFF00U >> shift; FT_Int count = height; - for ( ; count > 0; count--, line += pitch ) + for ( ; count > 0; count--, line += pitch, end += pitch ) { FT_Byte* write = line; - FT_Byte* end = line + pitch; if ( shift > 0 )