ref: 1dcb4448c12e771898b37818498ef9348a37189e
parent: 9f83e055028306dac4103c14f52d7cfdf8adedcf
author: David Turner <[email protected]>
date: Fri Apr 6 04:19:04 EDT 2007
fixed a memory buffer overwrite bug. Damn !!
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,8 @@
+2007-04-06 David Turner <[email protected]>
+
+ * src/base/ftbimap.c (ft_bitmap_assure_buffer): fixed buffer-overwrite bug
+
+
2007-04-04 Werner Lemberg <[email protected]>
* Version 2.3.3 released.
--- a/src/base/ftbitmap.c
+++ b/src/base/ftbitmap.c
@@ -149,15 +149,15 @@
if ( bit_last < bit_width )
{FT_Byte* line = bitmap->buffer + ( bit_last >> 3 );
+ FT_Byte* end = bitmap->buffer + pitch;
FT_Int shift = bit_last & 7;
FT_UInt mask = 0xFF00U >> shift;
FT_Int count = height;
- for ( ; count > 0; count--, line += pitch )
+ for ( ; count > 0; count--, line += pitch, end += pitch )
{FT_Byte* write = line;
- FT_Byte* end = line + pitch;
if ( shift > 0 )