all repos — openbox @ 18a2bc6da55f1f065bcffdf1c3229d0f2fc7040c

openbox fork - make it a bit more like ryudo 

Fix memory corruption when y2sz is 0.

data is incremented one too many times when y2sz is zero, leading to
memory corruption.

[ also changed % 2 to & 1 -- Mikael ]
Reilly Grant reillyeon@qotw.net
commit

18a2bc6da55f1f065bcffdf1c3229d0f2fc7040c

parent

3cd4db67aa430c85af8ac88dc40e9cfa63cc246a

1 files changed, 8 insertions(+), 6 deletions(-)

jump to
M render/gradient.c → render/gradient.c 
@@ -507,11 +507,11 @@ if h > 5, then always a 1px middle gradient.
     */
     if (h <= 5) {
         y1sz = MAX(h/2, 0);
-        y2sz = (h < 3 ? 0 : h % 2);
+        y2sz = (h < 3) ? 0 : (h & 1);
         y3sz = MAX(h/2, 1);
     }
     else {
-        y1sz = h/2 - (1 - (h % 2));
+        y1sz = h/2 - (1 - (h & 1));
         y2sz = 1;
         y3sz = h/2;
     }

@@ -534,13 +534,15 @@ NEXT(y1);
     }
     *data = COLOR(y1);
     data += w;
-    for (y2 = y2sz-1; y2 > 0; --y2) {
+    if (y2sz) {
+        for (y2 = y2sz-1; y2 > 0; --y2) {
+            *data = COLOR(y2);
+            data += w;
+            NEXT(y2);
+        }
         *data = COLOR(y2);
         data += w;
-        NEXT(y2);
     }
-    *data = COLOR(y2);
-    data += w;
     for (y3 = y3sz-1; y3 > 0; --y3) {
         *data = COLOR(y3);
         data += w;