From 7a53cbcbdc2102f8c49fbd431e6083c70495a39a Mon Sep 17 00:00:00 2001 From: Gregor Schneider Date: Sat, 11 Apr 2009 16:48:47 +0000 Subject: [PATCH] - Fix a memory overwrite that was uncovered by recent win32k memory allocation changes (r40268 + r40269) - Fixes a crash in current QiP Infium that was hidden before, bug #4361 svn path=/trunk/; revision=40460 --- reactos/subsystems/win32/win32k/dib/dib32bpp.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reactos/subsystems/win32/win32k/dib/dib32bpp.c b/reactos/subsystems/win32/win32k/dib/dib32bpp.c index b18248d4762..430447ec588 100644 --- a/reactos/subsystems/win32/win32k/dib/dib32bpp.c +++ b/reactos/subsystems/win32/win32k/dib/dib32bpp.c @@ -257,7 +257,7 @@ DIB_32BPP_BitBltSrcCopy(PBLTINFO BltInfo) { Dest32 = (DWORD *) DestBits + (BltInfo->DestRect.right - BltInfo->DestRect.left - 1); Source32 = (DWORD *) SourceBits + (BltInfo->DestRect.right - BltInfo->DestRect.left - 1); - for (i = BltInfo->DestRect.right; BltInfo->DestRect.left <= i; i--) + for (i = BltInfo->DestRect.right - 1; BltInfo->DestRect.left <= i; i--) { *Dest32-- = XLATEOBJ_iXlate(BltInfo->XlateSourceToDest, *Source32--); }