From e20eb8b760fc6c914d785de62e04bd93e5cc6dfa Mon Sep 17 00:00:00 2001 From: Matthias Clasen Date: Fri, 19 Aug 2005 16:16:17 +0000 Subject: [PATCH] Avoid a buffer overrun. (#313900, Sebastien Bacher) 2005-08-19 Matthias Clasen * gtk/gtkhsv.c (paint_triangle): Avoid a buffer overrun. (#313900, Sebastien Bacher) --- ChangeLog | 3 +++ ChangeLog.pre-2-10 | 3 +++ ChangeLog.pre-2-8 | 3 +++ gtk/gtkhsv.c | 4 ++-- 4 files changed, 11 insertions(+), 2 deletions(-) diff --git a/ChangeLog b/ChangeLog index 489908ea94..64fa10f42b 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,8 @@ 2005-08-19 Matthias Clasen + * gtk/gtkhsv.c (paint_triangle): Avoid a buffer overrun. + (#313900, Sebastien Bacher) + * gtk/gtktreeview.c (gtk_tree_view_get_visible_range): Return FALSE if the tree is empty. (#313891, Guillaume Cottenceau) diff --git a/ChangeLog.pre-2-10 b/ChangeLog.pre-2-10 index 489908ea94..64fa10f42b 100644 --- a/ChangeLog.pre-2-10 +++ b/ChangeLog.pre-2-10 @@ -1,5 +1,8 @@ 2005-08-19 Matthias Clasen + * gtk/gtkhsv.c (paint_triangle): Avoid a buffer overrun. + (#313900, Sebastien Bacher) + * gtk/gtktreeview.c (gtk_tree_view_get_visible_range): Return FALSE if the tree is empty. (#313891, Guillaume Cottenceau) diff --git a/ChangeLog.pre-2-8 b/ChangeLog.pre-2-8 index 489908ea94..64fa10f42b 100644 --- a/ChangeLog.pre-2-8 +++ b/ChangeLog.pre-2-8 @@ -1,5 +1,8 @@ 2005-08-19 Matthias Clasen + * gtk/gtkhsv.c (paint_triangle): Avoid a buffer overrun. + (#313900, Sebastien Bacher) + * gtk/gtktreeview.c (gtk_tree_view_get_visible_range): Return FALSE if the tree is empty. (#313891, Guillaume Cottenceau) diff --git a/gtk/gtkhsv.c b/gtk/gtkhsv.c index e3ea349662..fcd5d53578 100644 --- a/gtk/gtkhsv.c +++ b/gtk/gtkhsv.c @@ -1201,7 +1201,7 @@ paint_triangle (GtkHSV *hsv, for (xx = x; xx < x_start; xx++) *p++ = c; - for (xx = x_start; xx < x_end; xx++) + for (; xx < x_end; xx++) { x_interp = CLAMP (xx, xl, xr); @@ -1212,7 +1212,7 @@ paint_triangle (GtkHSV *hsv, c = (rr << 16) | (gr << 8) | br; - for (xx = x_end; xx < x + width; xx++) + for (; xx < x + width; xx++) *p++ = c; } } -- 2.30.2