From 5ef0934e92fc57aed9fb05466dd3f1c47f09c93a Mon Sep 17 00:00:00 2001 From: Robin Watts Date: Wed, 26 Jul 2017 10:35:51 +0100 Subject: Fix upper bounds checks on lerp image painting. --- source/fitz/draw-affine.c | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) (limited to 'source/fitz/draw-affine.c') diff --git a/source/fitz/draw-affine.c b/source/fitz/draw-affine.c index ca44be7e..b67e3e0d 100644 --- a/source/fitz/draw-affine.c +++ b/source/fitz/draw-affine.c @@ -37,7 +37,7 @@ template_affine_alpha_N_lerp(byte * restrict dp, int da, const byte * restrict s do { - if (u + 32768 >= 0 && u < sw && v + 32768 >= 0 && v < sh) + if (u + 32768 >= 0 && u + 65536 < sw && v + 32768 >= 0 && v + 65536 < sh) { int ui = u >> 16; int vi = v >> 16; @@ -77,7 +77,7 @@ template_affine_alpha_g2rgb_lerp(byte * restrict dp, int da, const byte * restri { do { - if (u + 32768 >= 0 && u < sw && v + 32768 >= 0 && v < sh) + if (u + 32768 >= 0 && u + 65536 < sw && v + 32768 >= 0 && v + 65536 < sh) { int ui = u >> 16; int vi = v >> 16; @@ -324,7 +324,7 @@ template_affine_N_lerp(byte * restrict dp, int da, const byte * restrict sp, int do { - if (u + 32768 >= 0 && u < sw && v + 32768 >= 0 && v < sh) + if (u + 32768 >= 0 && u + 65536 < sw && v + 32768 >= 0 && v + 65536 < sh) { int ui = u >> 16; int vi = v >> 16; @@ -363,7 +363,7 @@ template_affine_solid_g2rgb_lerp(byte * restrict dp, int da, const byte * restri { do { - if (u + 32768 >= 0 && u < sw && v + 32768 >= 0 && v < sh) + if (u + 32768 >= 0 && u + 65536 < sw && v + 32768 >= 0 && v + 65536 < sh) { int ui = u >> 16; int vi = v >> 16; @@ -723,7 +723,7 @@ template_affine_color_N_lerp(byte * restrict dp, int da, const byte * restrict s do { - if (u + 32768 >= 0 && u < sw && v + 32768 >= 0 && v < sh) + if (u + 32768 >= 0 && u + 65536 < sw && v + 32768 >= 0 && v + 65536 < sh) { int ui = u >> 16; int vi = v >> 16; -- cgit v1.2.3