> @@ -97,6 +97,11 @@ glue(glue(cirrus_bitblt_rop_fwd_transp_,
> ROP_NAME),_8)(CirrusVGAState *s,
> uint8_t p;
> dstpitch -= bltwidth;
> srcpitch -= bltwidth;
> +
> + if (dstpitch < 0 || srcpitch < 0) {
> + return;
> + }
Shouldn't that be ...
if (bltheight > 1 && (dstpitch < 0 || srcpitch < 0)) {
... matching the check of the non-transparent version a few lines up in
the same source file?
cheers,
Gerd
