From 95c70bb7be5523ebd3b31b94c6ff046db44d76b4 Mon Sep 17 00:00:00 2001 From: marha Date: Thu, 10 Sep 2009 06:02:42 +0000 Subject: Solved crash due to writing out of bits buffer in create_bits_picture. xoff and yoff should be taken into acount for adjusting the bits pointer. --- xorg-server/fb/fbpict.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'xorg-server/fb') diff --git a/xorg-server/fb/fbpict.c b/xorg-server/fb/fbpict.c index 2e56ab1ae..04ea68b3a 100644 --- a/xorg-server/fb/fbpict.c +++ b/xorg-server/fb/fbpict.c @@ -337,7 +337,7 @@ create_bits_picture (PicturePtr pict, fbGetDrawable (drawable, bits, stride, bpp, xoff, yoff); - bits = (FbBits*)((CARD8*)bits + drawable->y * stride * sizeof(FbBits) + drawable->x * (bpp / 8)); + bits = (FbBits*)((CARD8*)bits + (yoff+drawable->y) * stride * sizeof(FbBits) + (xoff+drawable->x) * (bpp / 8)); image = pixman_image_create_bits ( pict->format, drawable->width, drawable->height, -- cgit v1.2.3