Author: gschneider
Date: Sat Apr 11 20:48:47 2009
New Revision: 40460
URL:
http://svn.reactos.org/svn/reactos?rev=40460&view=rev
Log:
- Fix a memory overwrite that was uncovered by recent win32k memory allocation changes
(r40268 + r40269)
- Fixes a crash in current QiP Infium that was hidden before, bug #4361
Modified:
trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c
Modified: trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c
URL:
http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/di…
==============================================================================
--- trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] (original)
+++ trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] Sat Apr 11 20:48:47
2009
@@ -257,7 +257,7 @@
{
Dest32 = (DWORD *) DestBits + (BltInfo->DestRect.right -
BltInfo->DestRect.left - 1);
Source32 = (DWORD *) SourceBits + (BltInfo->DestRect.right -
BltInfo->DestRect.left - 1);
- for (i = BltInfo->DestRect.right; BltInfo->DestRect.left <=
i; i--)
+ for (i = BltInfo->DestRect.right - 1; BltInfo->DestRect.left
<= i; i--)
{
*Dest32-- = XLATEOBJ_iXlate(BltInfo->XlateSourceToDest,
*Source32--);
}