diff options
| author | rmax <rmax> | 2007-09-11 18:05:03 (GMT) |
|---|---|---|
| committer | rmax <rmax> | 2007-09-11 18:05:03 (GMT) |
| commit | 4c6391873ec6a75617ac9df3f6906f41b6d9dbbd (patch) | |
| tree | 8328fbb356381b101c3a679d3faa8a0e92af1251 /generic | |
| parent | e125b9425935c29a2a759b69e4146adbc012a183 (diff) | |
| download | tk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.zip tk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.tar.gz tk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.tar.bz2 | |
* generic/tkImgGIF.c: Fixed a buffer overrun that got triggered by
multi-frame interlaced GIFs that contain subsequent frames that
are smaller than the first one.
* tests/imgPhoto.test: Added a test for the above.
Diffstat (limited to 'generic')
| -rw-r--r-- | generic/tkImgGIF.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/generic/tkImgGIF.c b/generic/tkImgGIF.c index ec4e5fb..32c784e 100644 --- a/generic/tkImgGIF.c +++ b/generic/tkImgGIF.c @@ -32,7 +32,7 @@ * This file also contains code from miGIF. See lower down in file for the * applicable copyright notice for that portion. * - * RCS: @(#) $Id: tkImgGIF.c,v 1.36 2007/09/07 00:34:52 dgp Exp $ + * RCS: @(#) $Id: tkImgGIF.c,v 1.37 2007/09/11 18:05:04 rmax Exp $ */ /* @@ -1031,7 +1031,7 @@ ReadImage( if (interlace) { ypos += interlaceStep[pass]; - while (ypos >= height) { + while (ypos >= rows) { pass++; if (pass > 3) { return TCL_OK; |