summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorSamuel Rødal <sroedal@trolltech.com>2009-06-02 08:42:21 (GMT)
committerSamuel Rødal <sroedal@trolltech.com>2009-06-02 08:43:35 (GMT)
commitd52fb58f34199e9a6e008929425cd21b92a2674a (patch)
tree84b38d5fddf2aef6688a92a2ade5aad67ebfaf23 /src
parent63fba94e074c29f17e35c7cf9133d1878b18401f (diff)
downloadQt-d52fb58f34199e9a6e008929425cd21b92a2674a.zip
Qt-d52fb58f34199e9a6e008929425cd21b92a2674a.tar.gz
Qt-d52fb58f34199e9a6e008929425cd21b92a2674a.tar.bz2
Fixed bug in QClipData::fixup().
The bounding rect computed in fixup() is one pixel too wide, causing potential memory corruption by painting outside device boundaries. Reviewed-by: Trond
Diffstat (limited to 'src')
-rw-r--r--src/gui/painting/qpaintengine_raster.cpp2
1 files changed, 0 insertions, 2 deletions
diff --git a/src/gui/painting/qpaintengine_raster.cpp b/src/gui/painting/qpaintengine_raster.cpp
index 3f85095..578a815 100644
--- a/src/gui/painting/qpaintengine_raster.cpp
+++ b/src/gui/painting/qpaintengine_raster.cpp
@@ -4475,14 +4475,12 @@ void QClipData::fixup()
if (sl != left || sr != right)
isRect = false;
}
- ++xmax;
// qDebug("xmin=%d,xmax=%d,ymin=%d,ymax=%d %s", xmin, xmax, ymin, ymax, isRect ? "rectangular" : "");
if (isRect) {
hasRectClip = true;
clipRect.setRect(xmin, ymin, xmax - xmin, ymax - ymin);
}
-
}
/*