| <<<Back 1 day (to 2016/12/24) | 20161225 |
Robin_Watts | and we've released 1.10 | 00:07.47 |
| They've obviously caught up a bit recently. | 00:08.10 |
camelopard | cmd_put_bits(..., row, ...) in gxclrect.c:860 tries to compress re.width*height bytes, but row is shifted by (data_x >> 3) | 04:18.54 |
| So some bytes beyond the end of the buffer get accessed. This appears to be the cause of the bug 696605. | 04:23.05 |
| Can anybody comment on this finding, please. | 04:26.12 |
Robin_Watts | camelopard: Can you put it in the bug report please? That's clist, so it's rays area, but he's off for Xmas. | 09:38.27 |
| camelopard: data_x>>3 suggests that it's 1bpp data. cmd_put_bits tries to compress re.width * height bits, not bytes. | 09:59.48 |
| Forward 1 day (to 2016/12/26)>>> | |