On 03/08/2018 07:31 AM, Gerd Hoffmann wrote:
Typically the scanline length and the line offset are identical. But
case they are not our calculation for region_end is incorrect. Using
line_offset is fine for all scanlines, except the last one where we have
to use the actual scanline length.
Fixes: CVE-2018-<to-be-filled>
Cc: P J P <[email protected]>
Cc: Ross Lagerwall <[email protected]>
Signed-off-by: Gerd Hoffmann <[email protected]>
---
Tested-by: Ross Lagerwall <[email protected]>
Thanks!
--
Ross Lagerwall
