main/imlib2/bufferoverflow.patch


1
2
3
4
5
6
7
8
9
10
11
12
13

--- src/modules/loaders/loader_xpm.c
+++ src/modules/loaders/loader_xpm.c.new
@@ -246,8 +246,8 @@
                                  return 0;
                               }
                             ptr = im->data;
-                            end = ptr + (sizeof(DATA32) * w * h);
                             pixels = w * h;
+                            end = ptr + pixels;
                          }
                        else
                          {