diff options
author | tscholb <scholb.kim@samsung.com> | 2023-01-09 11:47:49 +0900 |
---|---|---|
committer | tscholb <scholb.kim@samsung.com> | 2023-01-09 11:48:38 +0900 |
commit | 28a24435070c4c5092f926404db976036295852d (patch) | |
tree | 98bd3eb3568621c187d6e096a12632c47b2a4b72 | |
parent | f5a82096a2a1c97da2de10719eb201f2c9601325 (diff) | |
download | cairo-accepted/tizen_6.0_unified.tar.gz cairo-accepted/tizen_6.0_unified.tar.bz2 cairo-accepted/tizen_6.0_unified.zip |
[CVE-2020-35492] fix svace issuesubmit/tizen_6.0/20230109.233105accepted/tizen/6.0/unified/20230112.130104tizen_6.0accepted/tizen_6.0_unified
Change-Id: I130f1731d177eb1486a94c7a1ddd0d4a8be21964
-rw-r--r-- | src/cairo-image-compositor.c | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/cairo-image-compositor.c b/src/cairo-image-compositor.c index e343d275a..9bb11da4d 100644 --- a/src/cairo-image-compositor.c +++ b/src/cairo-image-compositor.c @@ -2686,14 +2686,14 @@ _inplace_src_spans (void *abstract_renderer, int y, int h, unsigned num_spans) { cairo_image_span_renderer_t *r = abstract_renderer; - uint8_t *m; + uint8_t *m, *base = (uint8_t*)pixman_image_get_data(r->mask); int x0; if (num_spans == 0) return CAIRO_STATUS_SUCCESS; x0 = spans[0].x; - m = r->_buf; + m = base; do { int len = spans[1].x - spans[0].x; if (len >= r->u.composite.run_length && spans[0].coverage == 0xff) { @@ -2731,7 +2731,7 @@ _inplace_src_spans (void *abstract_renderer, int y, int h, spans[0].x, y, spans[1].x - spans[0].x, h); - m = r->_buf; + m = base; x0 = spans[1].x; } else if (spans[0].coverage == 0x0) { if (spans[0].x != x0) { @@ -2760,7 +2760,7 @@ _inplace_src_spans (void *abstract_renderer, int y, int h, #endif } - m = r->_buf; + m = base; x0 = spans[1].x; } else { *m++ = spans[0].coverage; |