diff options
author | Robin Watts <robin.watts@artifex.com> | 2014-04-27 23:40:34 +0100 |
---|---|---|
committer | Robin Watts <robin.watts@artifex.com> | 2014-04-27 23:45:09 +0100 |
commit | 22685a3e50098360a599ec344b9ae470ce740313 (patch) | |
tree | 7d2884b80565d7c3bebf44c6456bf658a16438b9 /platform/ios/Classes/MuAnnotSelectView.h | |
parent | a2e9a46fea0489c341e0dd713763b0fd609b47c2 (diff) | |
download | mupdf-22685a3e50098360a599ec344b9ae470ce740313.tar.xz |
Bug 695171: Pointer error when padding an fz_concat machine
When we return the padding byte in an fz_concat stream, ensure that
we remember to increment rp to point just past in. If not, then we'll
read 2 whitespace chars out. This is fine unless we try and
fz_unread_byte the first one, when we'll leave rp pointing to
an out of buffer address.
Credit to Malc for the bisecting/debugging that got me to the fix.
Many thanks.
Diffstat (limited to 'platform/ios/Classes/MuAnnotSelectView.h')
0 files changed, 0 insertions, 0 deletions