mirror of
https://github.com/morgan9e/FreeRDP
synced 2026-04-15 00:44:19 +09:00
[codec,clear] fix off by one length check
This commit is contained in:
@@ -876,12 +876,12 @@ static BOOL clear_decompress_bands_data(CLEAR_CONTEXT* WINPR_RESTRICT clear,
|
||||
if (count > nHeight)
|
||||
count = nHeight;
|
||||
|
||||
if (nXDstRel + i > nDstWidth)
|
||||
if (nXDstRel + i >= nDstWidth)
|
||||
return FALSE;
|
||||
|
||||
for (UINT32 y = 0; y < count; y++)
|
||||
{
|
||||
if (nYDstRel + y > nDstHeight)
|
||||
if (nYDstRel + y >= nDstHeight)
|
||||
return FALSE;
|
||||
|
||||
BYTE* pDstPixel8 =
|
||||
|
||||
Reference in New Issue
Block a user