From 10952ed7f587d600c4ed0b87a35d81d2de0ba913 Mon Sep 17 00:00:00 2001 From: Brett Gordon Date: Fri, 23 Oct 2015 02:10:14 -0400 Subject: [PATCH] coco3: graphics: fix bounds checking --- Kernel/platform-coco3/video.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Kernel/platform-coco3/video.c b/Kernel/platform-coco3/video.c index 447c6676..181f55ab 100644 --- a/Kernel/platform-coco3/video.c +++ b/Kernel/platform-coco3/video.c @@ -148,8 +148,8 @@ int gfx_draw_op(uarg_t arg, char *ptr) break; } l -= 8; - if (p[0] > 31 || p[1] > 191 || p[2] > 31 || p[3] > 191 || - p[0] + p[2] > 32 || p[1] + p[3] > 192 || + if (p[0] > 191 || p[1] > 31 || p[2] > 191 || p[3] > 31 || + p[0] + p[2] > 191 || p[1] + p[3] > 31 || (p[2] * p[3]) > l) { err = -EFAULT; break; -- 2.34.1