Dan Kegel : gdi32: Fix minor read buffer overrun in CombineRgn.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: f3560ece31d59f1aaba2c2fef2487bccb1f20d96
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=f3560ece31d59f1aaba2c2fef2...

Author: Dan Kegel <dank(a)kegel.com>
Date:   Fri Nov 27 23:39:28 2009 -0800

gdi32: Fix minor read buffer overrun in CombineRgn.

---

 dlls/gdi32/region.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)

diff --git a/dlls/gdi32/region.c b/dlls/gdi32/region.c
index f3c5e13..6c523c2 100644
--- a/dlls/gdi32/region.c
+++ b/dlls/gdi32/region.c
@@ -2216,7 +2216,8 @@ static BOOL REGION_SubtractO (WINEREGION *pReg, RECT *r1, RECT *r1End,
                 if (!add_rect( pReg, left, top, r1->right, bottom )) return FALSE;
 	    }
 	    r1++;
-	    left = r1->left;
+	    if (r1 != r1End)
+	        left = r1->left;
 	}
     }