[PATCH] array overrun in pango graphics

From: Hubert Figuiere <hfiguiere_at_teaser.fr>
Date: Sun Sep 02 2007 - 21:31:34 CEST

Hi,

Attached is a patch to fix an array overrun in the pango graphics. Since
I don't really understand all the details of this code, I don't really
want to commit it.

 RI.m_pGlyphs->glyphs[i].geometry.width += RI.m_pJustify[i];

But basically there are case where RI.m_iLength (the max value of i) is
longer than RI.m_pGlyphs->num_glyphs (the length of m_pJustify[]),
causing an overrun.

Any comment?

Hub

Received on Sun Sep 2 21:32:12 2007

This archive was generated by hypermail 2.1.8 : Sun Sep 02 2007 - 21:32:12 CEST