From aa646dd01c726c24d1a9c73cc556ffd03588021d Mon Sep 17 00:00:00 2001 From: Sebastian Rasmussen Date: Sun, 10 May 2009 12:08:15 +0200 Subject: Fix bug where image scaling accessed data outside of buffer. --- fitzdraw/imagescale.c | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'fitzdraw') diff --git a/fitzdraw/imagescale.c b/fitzdraw/imagescale.c index 5d9af3ac..79d31c06 100644 --- a/fitzdraw/imagescale.c +++ b/fitzdraw/imagescale.c @@ -241,7 +241,7 @@ fz_scalepixmaptile(fz_pixmap *dst, int xoffs, int yoffs, fz_pixmap *src, int xde srowx(src->samples + (y + iy) * src->w * n, buf + iy * ow * n, src->w, xdenom); - scolx(buf, dstsamples + oy * dst->w * n, ow, ydenom); + scolx(buf, dstsamples + oy * dst->w * n, ow, remaining); } } @@ -263,7 +263,8 @@ fz_scalepixmaptile(fz_pixmap *dst, int xoffs, int yoffs, fz_pixmap *src, int xde fz_srown(src->samples + (y + iy) * src->w * n, buf + iy * ow * n, src->w, xdenom, n); - fz_scoln(buf, dstsamples + oy * dst->w * n, ow, ydenom, n); + + fz_scoln(buf, dstsamples + oy * dst->w * n, ow, remaining, n); } } @@ -325,7 +326,7 @@ fz_scalepixmap(fz_pixmap **dstp, fz_pixmap *src, int xdenom, int ydenom) srowx(src->samples + (y + iy) * src->w * n, buf + iy * ow * n, src->w, xdenom); - scolx(buf, dst->samples + oy * dst->w * n, dst->w, ydenom); + scolx(buf, dst->samples + oy * dst->w * n, dst->w, remaining); } } @@ -347,7 +348,7 @@ fz_scalepixmap(fz_pixmap **dstp, fz_pixmap *src, int xdenom, int ydenom) fz_srown(src->samples + (y + iy) * src->w * n, buf + iy * ow * n, src->w, xdenom, n); - fz_scoln(buf, dst->samples + oy * dst->w * n, dst->w, ydenom, n); + fz_scoln(buf, dst->samples + oy * dst->w * n, dst->w, remaining, n); } } -- cgit v1.2.3