cssvalue: Fix out-of-bounds in array transition code

diff --git a/gtk/gtkcssarrayvalue.c b/gtk/gtkcssarrayvalue.c
index de69c42900e3d2c53626c5fb6df8f9927a6380a2..dadedba90d479769d1ae10ba6ecdb753e2c3f68b 100644 (file)
--- a/gtk/gtkcssarrayvalue.c
+++ b/gtk/gtkcssarrayvalue.c
@@ -126,8 +126,8 @@ gtk_css_value_array_transition_repeat (GtkCssValue *start,
 
   for (i = 0; i < n; i++)
     {
-      transitions[i] = _gtk_css_value_transition (start->values[i],
-                                                  end->values[i],
+      transitions[i] = _gtk_css_value_transition (start->values[i % start->n_values],
+                                                  end->values[i % end->n_values],
                                                   property_id,
                                                   progress);
       if (transitions[i] == NULL)