hermet pushed a commit to branch master. http://git.enlightenment.org/core/efl.git/commit/?id=8b17564c74860251a86dbcf76dfa2b07a57a4e0a
commit 8b17564c74860251a86dbcf76dfa2b07a57a4e0a Author: Hermet Park <[email protected]> Date: Tue Sep 18 11:48:13 2018 +0900 efl gfx_path: prevent buffer overflow. Summary: the counter must be less than 7, don't allow to over the index. @fix Reviewers: #committers Subscribers: cedric, #reviewers, #committers Tags: #efl Differential Revision: https://phab.enlightenment.org/D7053 --- src/lib/efl/interfaces/efl_gfx_path.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lib/efl/interfaces/efl_gfx_path.c b/src/lib/efl/interfaces/efl_gfx_path.c index 036c35e6a6..cd948ddd3c 100644 --- a/src/lib/efl/interfaces/efl_gfx_path.c +++ b/src/lib/efl/interfaces/efl_gfx_path.c @@ -1235,7 +1235,7 @@ process_command(Eo *obj, Efl_Gfx_Path_Data *pd, char cmd, double *arr, int count case 'q': case 't': { - for(i=0; i<count; i += 2) + for(i = 0; i < count - 1; i += 2) { arr[i] = arr[i] + *cur_x; arr[i+1] = arr[i+1] + *cur_y; --
