diff options
| author | Eugene Sandulenko | 2019-12-31 16:37:51 +0100 |
|---|---|---|
| committer | Eugene Sandulenko | 2019-12-31 16:37:51 +0100 |
| commit | 42dc7451adb979229588784a22560b92342b4d59 (patch) | |
| tree | e2ce581f5258288d7ebf34a317ad5eb549891bdf /engines/director | |
| parent | a85989dd8a0b130f4a0be44c90e6488cb60caf4f (diff) | |
| download | scummvm-rg350-42dc7451adb979229588784a22560b92342b4d59.tar.gz scummvm-rg350-42dc7451adb979229588784a22560b92342b4d59.tar.bz2 scummvm-rg350-42dc7451adb979229588784a22560b92342b4d59.zip | |
DIRECTOR: Fix out-of-bounds write
Diffstat (limited to 'engines/director')
| -rw-r--r-- | engines/director/images.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/engines/director/images.cpp b/engines/director/images.cpp index 4f2ffc9dc0..3d031c7518 100644 --- a/engines/director/images.cpp +++ b/engines/director/images.cpp @@ -204,7 +204,7 @@ bool BITDDecoder::loadStream(Common::SeekableReadStream &stream) { for (x = 0; x < _surface->w;) { switch (_bitsPerPixel) { case 1: { - for (int c = 0; c < 8; c++, x++) { + for (int c = 0; c < 8 && x < _surface->w; c++, x++) { *((byte *)_surface->getBasePtr(x, y)) = (pixels[(((y * _surface->pitch) + x) / 8)] & (1 << (7 - c))) ? 0 : 0xff; } break; |