Alexandre Julliard pushed to branch master at wine / wine
Commits: eda15584 by Yuxuan Shui at 2025-07-21T15:21:53+02:00 d2d1: Fix out-of-bound array access.
d2d_fp_fast_expansion_sum_zeroelim contains many instances of this pattern:
if (a_idx < a_len) { use(a_curr); a_curr = a[++a_idx]; }
Here if a_idx is already a_len - 1, a[++a_idx] reads past the last element of a.
- - - - -
1 changed file:
- dlls/d2d1/geometry.c
View it on GitLab: https://gitlab.winehq.org/wine/wine/-/commit/eda1558423f84f854c3eb3712d24bce...