Vincent Povirk : gdiplus: Fix a copy outside allocated memory in GdipCreateTextureIA.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: e23ccb787d2c95f9c71312340cc192810407bb8b
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=e23ccb787d2c95f9c71312340c...

Author: Vincent Povirk 
Date:   Fri Sep  4 09:49:32 2009 -0500

gdiplus: Fix a copy outside allocated memory in GdipCreateTextureIA.

---

dlls/gdiplus/brush.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/gdiplus/brush.c b/dlls/gdiplus/brush.c
index 370de61..5e6b26a 100644
--- a/dlls/gdiplus/brush.c
+++ b/dlls/gdiplus/brush.c
@@ -735,7 +735,7 @@ GpStatus WINGDIPAPI GdipCreateTextureIA(GpImage *image,

/* image is flipped */
     if(pbmi->bmiHeader.biHeight > 0){
-        dibits += pbmi->bmiHeader.biSizeImage;
+        dibits += image_stride * (pbmi->bmiHeader.biHeight - 1);
         image_stride *= -1;
         textbits += stride * (n_height - 1);
         stride *= -1;