From 34182c66e954831dd455a07c601dfa6e01536ac8 Mon Sep 17 00:00:00 2001 From: Robin Watts Date: Mon, 17 Jan 2011 11:43:56 +0000 Subject: Fix out of bound memory access in smooth scaling single column code. --- draw/imagesmooth.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'draw') diff --git a/draw/imagesmooth.c b/draw/imagesmooth.c index 72345ed6..341e0377 100644 --- a/draw/imagesmooth.c +++ b/draw/imagesmooth.c @@ -925,7 +925,7 @@ scale_single_col(unsigned char *dst, unsigned char *src, fz_weights *weights, in /* Scale the next pixel in the column */ min = *contrib++; len = *contrib++; - min = (src_w-min)*n; + min = src_w-min*n; for (j = 0; j < n; j++) tmp[j] = 0; while (len-- > 0) -- cgit v1.2.3