From 42dc7451adb979229588784a22560b92342b4d59 Mon Sep 17 00:00:00 2001
From: Eugene Sandulenko
Date: Tue, 31 Dec 2019 16:37:51 +0100
Subject: DIRECTOR: Fix out-of-bounds write

---
 engines/director/images.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'engines')

diff --git a/engines/director/images.cpp b/engines/director/images.cpp
index 4f2ffc9dc0..3d031c7518 100644
--- a/engines/director/images.cpp
+++ b/engines/director/images.cpp
@@ -204,7 +204,7 @@ bool BITDDecoder::loadStream(Common::SeekableReadStream &stream) {
 			for (x = 0; x < _surface->w;) {
 				switch (_bitsPerPixel) {
 				case 1: {
-					for (int c = 0; c < 8; c++, x++) {
+					for (int c = 0; c < 8 && x < _surface->w; c++, x++) {
 						*((byte *)_surface->getBasePtr(x, y)) = (pixels[(((y * _surface->pitch) + x) / 8)] & (1 << (7 - c))) ? 0 : 0xff;
 					}
 					break;
-- 
cgit v1.2.3