On 03/08/2018 07:31 AM, Gerd Hoffmann wrote:
Typically the scanline length and the line offset are identical. But
case they are not our calculation for region_end is incorrect. Using
line_offset is fine for all scanlines, except the last one where we have
to use the actual scanline length.
Fixes: CVE-2018-<to-be-filled>
Cc: P J P <ppan...@redhat.com>
Cc: Ross Lagerwall <ross.lagerw...@citrix.com>
Signed-off-by: Gerd Hoffmann <kra...@redhat.com>
---
Tested-by: Ross Lagerwall <ross.lagerw...@citrix.com>
Thanks!
--
Ross Lagerwall
