summaryrefslogtreecommitdiffstats
path: root/generic
diff options
context:
space:
mode:
authorrmax <rmax>2007-09-11 18:05:03 (GMT)
committerrmax <rmax>2007-09-11 18:05:03 (GMT)
commit4c6391873ec6a75617ac9df3f6906f41b6d9dbbd (patch)
tree8328fbb356381b101c3a679d3faa8a0e92af1251 /generic
parente125b9425935c29a2a759b69e4146adbc012a183 (diff)
downloadtk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.zip
tk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.tar.gz
tk-4c6391873ec6a75617ac9df3f6906f41b6d9dbbd.tar.bz2
* generic/tkImgGIF.c: Fixed a buffer overrun that got triggered by
multi-frame interlaced GIFs that contain subsequent frames that are smaller than the first one. * tests/imgPhoto.test: Added a test for the above.
Diffstat (limited to 'generic')
-rw-r--r--generic/tkImgGIF.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/generic/tkImgGIF.c b/generic/tkImgGIF.c
index ec4e5fb..32c784e 100644
--- a/generic/tkImgGIF.c
+++ b/generic/tkImgGIF.c
@@ -32,7 +32,7 @@
* This file also contains code from miGIF. See lower down in file for the
* applicable copyright notice for that portion.
*
- * RCS: @(#) $Id: tkImgGIF.c,v 1.36 2007/09/07 00:34:52 dgp Exp $
+ * RCS: @(#) $Id: tkImgGIF.c,v 1.37 2007/09/11 18:05:04 rmax Exp $
*/
/*
@@ -1031,7 +1031,7 @@ ReadImage(
if (interlace) {
ypos += interlaceStep[pass];
- while (ypos >= height) {
+ while (ypos >= rows) {
pass++;
if (pass > 3) {
return TCL_OK;