coco3: graphics: fix bounds checking

diff --git a/Kernel/platform-coco3/video.c b/Kernel/platform-coco3/video.c
index 447c667..181f55a 100644 (file)
--- a/Kernel/platform-coco3/video.c
+++ b/Kernel/platform-coco3/video.c
@@ -148,8 +148,8 @@ int gfx_draw_op(uarg_t arg, char *ptr)
                        break;
                }
                l -= 8;
-               if (p[0] > 31 || p[1] > 191 || p[2] > 31 || p[3] > 191 ||
-                   p[0] + p[2] > 32 || p[1] + p[3] > 192 ||
+               if (p[0] > 191 || p[1] > 31 || p[2] > 191 || p[3] > 31 ||
+                   p[0] + p[2] > 191 || p[1] + p[3] > 31 ||
                    (p[2] * p[3]) > l) {
                        err = -EFAULT;
                        break;