diff options
| author | Alexander Larsson <alexl@redhat.com> | 2010-03-18 08:57:42 +0100 |
|---|---|---|
| committer | Alexander Larsson <alexl@redhat.com> | 2010-03-18 10:40:18 +0100 |
| commit | dcef400d30f079eb148429ff5b104022d3b9e66d (patch) | |
| tree | db48cfc6c4d645aa15c346c6a0a961f06d34df1a /common/canvas_base.c | |
| parent | b5f25486ef9be30bb7805101fb295cd0ae088e2d (diff) | |
| download | spice-dcef400d30f079eb148429ff5b104022d3b9e66d.tar.gz spice-dcef400d30f079eb148429ff5b104022d3b9e66d.tar.xz spice-dcef400d30f079eb148429ff5b104022d3b9e66d.zip | |
Fix uninitilized memory read in stroke_fill_spans()
y2 was not initialized
Diffstat (limited to 'common/canvas_base.c')
| -rw-r--r-- | common/canvas_base.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/common/canvas_base.c b/common/canvas_base.c index 2c85886a..e13a005b 100644 --- a/common/canvas_base.c +++ b/common/canvas_base.c @@ -2422,6 +2422,7 @@ static void stroke_fill_spans(lineGC * pGC, r.x1 = points[i].x; r.y1 = points[i].y; r.x2 = points[i].x + widths[i]; + r.y2 = r.y1 + 1; canvas->ops->fill_solid_rects_rop(canvas, &r, 1, strokeGC->color, rop); } @@ -2433,6 +2434,7 @@ static void stroke_fill_spans(lineGC * pGC, r.x1 = points[i].x; r.y1 = points[i].y; r.x2 = points[i].x + widths[i]; + r.y2 = r.y1 + 1; canvas->ops->fill_tiled_rects(canvas, &r, 1, strokeGC->tile, strokeGC->tile_offset_x, @@ -2444,6 +2446,7 @@ static void stroke_fill_spans(lineGC * pGC, r.x1 = points[i].x; r.y1 = points[i].y; r.x2 = points[i].x + widths[i]; + r.y2 = r.y1 + 1; canvas->ops->fill_tiled_rects_rop(canvas, &r, 1, strokeGC->tile, strokeGC->tile_offset_x, |