diff options
| author | Eugene Sandulenko | 2016-03-01 11:23:36 +0100 |
|---|---|---|
| committer | Eugene Sandulenko | 2016-03-01 12:11:09 +0100 |
| commit | f2e2d0f05d43c6b3615b13e28f37d33ab69aba17 (patch) | |
| tree | a64adfbec211a622fa0c7a0f1616796053cb2d3c /engines/wage | |
| parent | 0bf89a0f1e9c7407e1ea4977f66d0c4c076360b3 (diff) | |
| download | scummvm-rg350-f2e2d0f05d43c6b3615b13e28f37d33ab69aba17.tar.gz scummvm-rg350-f2e2d0f05d43c6b3615b13e28f37d33ab69aba17.tar.bz2 scummvm-rg350-f2e2d0f05d43c6b3615b13e28f37d33ab69aba17.zip | |
WAGE: Fix bufer overrun in bitmap code
Diffstat (limited to 'engines/wage')
| -rw-r--r-- | engines/wage/design.cpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/engines/wage/design.cpp b/engines/wage/design.cpp index 2a63436f5a..a3dbd9700b 100644 --- a/engines/wage/design.cpp +++ b/engines/wage/design.cpp @@ -435,7 +435,7 @@ void Design::drawBitmap(Graphics::Surface *surface, Common::SeekableReadStream & } ff.fill(); - for (y = 0; y < h; y++) { + for (y = 0; y < h && y1 + y < surface->h; y++) { byte *src = (byte *)tmp.getBasePtr(0, y); byte *dst = (byte *)surface->getBasePtr(x1, y1 + y); for (x = 0; x < w; x++) { |