Author: gschneider
Date: Sat Apr 11 20:48:47 2009
New Revision: 40460

URL: http://svn.reactos.org/svn/reactos?rev=40460&view=rev
Log:
- Fix a memory overwrite that was uncovered by recent win32k memory allocation 
changes (r40268 + r40269)
- Fixes a crash in current QiP Infium that was hidden before, bug #4361

Modified:
    trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c

Modified: trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c
URL: 
http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c?rev=40460&r1=40459&r2=40460&view=diff
==============================================================================
--- trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] (original)
+++ trunk/reactos/subsystems/win32/win32k/dib/dib32bpp.c [iso-8859-1] Sat Apr 
11 20:48:47 2009
@@ -257,7 +257,7 @@
                   {
                     Dest32 = (DWORD *) DestBits + (BltInfo->DestRect.right - 
BltInfo->DestRect.left - 1);
                     Source32 = (DWORD *) SourceBits + (BltInfo->DestRect.right 
- BltInfo->DestRect.left - 1);
-                    for (i = BltInfo->DestRect.right; BltInfo->DestRect.left 
<= i; i--)
+                    for (i = BltInfo->DestRect.right - 1; 
BltInfo->DestRect.left <= i; i--)
                       {
                         *Dest32-- = 
XLATEOBJ_iXlate(BltInfo->XlateSourceToDest, *Source32--);
                       }

Reply via email to