From 8e2166695594208c835194f9af04bdb9e6ef99fa Mon Sep 17 00:00:00 2001 From: Sebastian Rasmussen Date: Tue, 9 Jun 2009 23:30:10 +0200 Subject: Fix off by one in faxd boundary checking. --- fitz/filt_faxd.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'fitz/filt_faxd.c') diff --git a/fitz/filt_faxd.c b/fitz/filt_faxd.c index 2566e6c4..5a0e03c1 100644 --- a/fitz/filt_faxd.c +++ b/fitz/filt_faxd.c @@ -252,7 +252,7 @@ dec2d(fz_faxd *fax) case P: b1 = findchangingcolor(fax->ref, fax->a, fax->columns, !fax->c); if (b1 >= fax->columns) - b2 = fax->columns - 1; + b2 = fax->columns; else b2 = findchanging(fax->ref, b1, fax->columns); if (fax->c) setbits(fax->dst, fax->a, b2); @@ -268,7 +268,7 @@ dec2d(fz_faxd *fax) case VR1: b1 = 1 + findchangingcolor(fax->ref, fax->a, fax->columns, !fax->c); - if (b1 >= fax->columns) b1 = fax->columns - 1; + if (b1 >= fax->columns) b1 = fax->columns; if (fax->c) setbits(fax->dst, fax->a, b1); fax->a = b1; fax->c = !fax->c; @@ -276,7 +276,7 @@ dec2d(fz_faxd *fax) case VR2: b1 = 2 + findchangingcolor(fax->ref, fax->a, fax->columns, !fax->c); - if (b1 >= fax->columns) b1 = fax->columns - 1; + if (b1 >= fax->columns) b1 = fax->columns; if (fax->c) setbits(fax->dst, fax->a, b1); fax->a = b1; fax->c = !fax->c; @@ -284,7 +284,7 @@ dec2d(fz_faxd *fax) case VR3: b1 = 3 + findchangingcolor(fax->ref, fax->a, fax->columns, !fax->c); - if (b1 >= fax->columns) b1 = fax->columns - 1; + if (b1 >= fax->columns) b1 = fax->columns; if (fax->c) setbits(fax->dst, fax->a, b1); fax->a = b1; fax->c = !fax->c; -- cgit v1.2.3