zdoom/raze-gles
0
0
Fork 0
mirror of https://github.com/ZDoom/raze-gles.git synced 2024-11-13 07:58:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix buffer overflow in getclosestcol_lim

Browse source
This commit is contained in:
nukeykt 2019-11-12 13:40:19 +09:00 committed by Christoph Oelckers
parent 02fd5dc0ab
commit 524d0dd496
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
source/build/src/colmatch.cpp
View file

@ -92,7 +92,7 @@ int32_t getclosestcol_lim(int32_t const r, int32_t const g, int32_t const b, int
int mindist = -1; int mindist = -1;
int const k = (numclosestcolresults > COLRESULTSIZ) ? (COLRESULTSIZ-4) : (numclosestcolresults-4); int const k = (numclosestcolresults > COLRESULTSIZ) ? COLRESULTSIZ : numclosestcolresults;
if (!numclosestcolresults) goto skip; if (!numclosestcolresults) goto skip;
@ -101,7 +101,7 @@ int32_t getclosestcol_lim(int32_t const r, int32_t const g, int32_t const b, int
int i; int i;
for (i = 0; i < k+4; i+=4) for (i = 0; i <= k-4; i+=4)
{ {
if (col == (getclosestcol_results[i] & 0x00ffffff)) { mindist = i; break; } if (col == (getclosestcol_results[i] & 0x00ffffff)) { mindist = i; break; }
if (col == (getclosestcol_results[i+1] & 0x00ffffff)) { mindist = i+1; break; } if (col == (getclosestcol_results[i+1] & 0x00ffffff)) { mindist = i+1; break; }