diff options
| author | Colin Snover | 2017-11-11 12:28:22 -0600 |
|---|---|---|
| committer | Colin Snover | 2017-11-11 16:19:23 -0600 |
| commit | f99c83c0a003834a8d3d9f2f608f447cb21df3f1 (patch) | |
| tree | c8e4ffc9c9d3a2dd06fac3979707f35bff51dad8 /engines/lab/processroom.cpp | |
| parent | 406ff7db10089ad502cf5a80a3534dd82c371ef7 (diff) | |
| download | scummvm-rg350-f99c83c0a003834a8d3d9f2f608f447cb21df3f1.tar.gz scummvm-rg350-f99c83c0a003834a8d3d9f2f608f447cb21df3f1.tar.bz2 scummvm-rg350-f99c83c0a003834a8d3d9f2f608f447cb21df3f1.zip | |
DREAMWEB: Fix out-of-bounds read of frame animation data
The game reads until it sees 0xFF, which is not until frame 14 for
some animations in the first interactive room of the game. This
happened to work previously because the struct is packed so it
would read into the b31.. members, but this was still technically
an out-of-bounds read.
Diffstat (limited to 'engines/lab/processroom.cpp')
0 files changed, 0 insertions, 0 deletions