]>
Commit | Line | Data |
---|---|---|
bf5d54ea PG |
1 | --- gdk-pixbuf-0.22.0/gdk-pixbuf/io-bmp.c.bmploop 2004-08-20 14:18:30.178162560 -0400 |
2 | +++ gdk-pixbuf-0.22.0/gdk-pixbuf/io-bmp.c 2004-08-20 14:18:42.997213768 -0400 | |
3 | @@ -899,8 +899,18 @@ | |
4 | guchar c; | |
5 | gint idx; | |
6 | ||
7 | - if (context->compr.y >= context->Header.height) | |
8 | + /* context->compr.y might be past the last line because we are | |
9 | + * on padding past the end of a valid data, or we might have hit | |
10 | + * out-of-bounds data. Either way we just eat-and-ignore the | |
11 | + * rest of the file. Doing the check only here and not when | |
12 | + * we change y below is fine since BufferSize is always 2 here | |
13 | + * and the BMP file format always starts new data on 16-bit | |
14 | + * boundaries. | |
15 | + */ | |
16 | + if (context->compr.y >= context->Header.height) { | |
17 | + context->BufferDone = 0; | |
18 | return TRUE; | |
19 | + } | |
20 | ||
21 | y = context->compr.y; | |
22 |