diff options
| author | rmax <rmax@noemail.net> | 2007-09-11 18:05:03 (GMT) |
|---|---|---|
| committer | rmax <rmax@noemail.net> | 2007-09-11 18:05:03 (GMT) |
| commit | cc715bf8e13e1982a475dc47c40c91d04f8070b7 (patch) | |
| tree | 8328fbb356381b101c3a679d3faa8a0e92af1251 /generic/tkImgGIF.c | |
| parent | c3fdf2d152e5279431f0687e47960b7f870ecbd2 (diff) | |
| download | tk-cc715bf8e13e1982a475dc47c40c91d04f8070b7.zip tk-cc715bf8e13e1982a475dc47c40c91d04f8070b7.tar.gz tk-cc715bf8e13e1982a475dc47c40c91d04f8070b7.tar.bz2 | |
* generic/tkImgGIF.c: Fixed a buffer overrun that got triggered by
multi-frame interlaced GIFs that contain subsequent frames that
are smaller than the first one.
* tests/imgPhoto.test: Added a test for the above.
FossilOrigin-Name: 865f831b965f75ae2d7730227cc01da78e4bf5d9
Diffstat (limited to 'generic/tkImgGIF.c')
| -rw-r--r-- | generic/tkImgGIF.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/generic/tkImgGIF.c b/generic/tkImgGIF.c index ec4e5fb..32c784e 100644 --- a/generic/tkImgGIF.c +++ b/generic/tkImgGIF.c @@ -32,7 +32,7 @@ * This file also contains code from miGIF. See lower down in file for the * applicable copyright notice for that portion. * - * RCS: @(#) $Id: tkImgGIF.c,v 1.36 2007/09/07 00:34:52 dgp Exp $ + * RCS: @(#) $Id: tkImgGIF.c,v 1.37 2007/09/11 18:05:04 rmax Exp $ */ /* @@ -1031,7 +1031,7 @@ ReadImage( if (interlace) { ypos += interlaceStep[pass]; - while (ypos >= height) { + while (ypos >= rows) { pass++; if (pass > 3) { return TCL_OK; |