[gschneider] 40460: - Fix a memory overwrite that was uncovered by recent win32k memory allocation changes (r40268 + r40269) - Fixes a crash in current QiP Infium that was hidden before, bug #4361

Author: gschneider
Date: Sat Apr 11 20:48:47 2009
New Revision: 40460

URL: http://svn.reactos.org/svn/reactos?rev=40460&view=rev
Log:
- Fix a memory overwrite that was uncovered by recent win32k memory allocation changes (r40268 + r40269)
- Fixes a crash in current QiP Infium that was hidden before, bug #4361

Modified:
    trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c

Modified: trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/dib...
==============================================================================
--- trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] (original)
+++ trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] Sat Apr 11 20:48:47 2009
@@ -257,7 +257,7 @@
                   {
                     Dest32 = (DWORD *) DestBits + (BltInfo->DestRect.right - BltInfo->DestRect.left - 1);
                     Source32 = (DWORD *) SourceBits + (BltInfo->DestRect.right - BltInfo->DestRect.left - 1);
-                    for (i = BltInfo->DestRect.right; BltInfo->DestRect.left <= i; i--)
+                    for (i = BltInfo->DestRect.right - 1; BltInfo->DestRect.left <= i; i--)
                       {
                         *Dest32-- = XLATEOBJ_iXlate(BltInfo->XlateSourceToDest, *Source32--);
                       }