Re: crash in _fill_xrgb32_lerp_opaque_spans

Ilya Sakhnenko <[email protected]> Sun, 8 Mar 2015 13:28:03 +0300

Newsgroups	gmane.comp.lib.cairo
Message-ID	<CA+Z9t5RjM=v5RUWF2rBM-yB4tetCKRn=_Xsbx0OSaUyj7dehvg@mail.gmail.com>

Dear Cairo developers,

I would like to mention that the hack I used before (len-- > 0 in
_fill_xrgb32_lerp_opaque_spans) does not solve the problem. So, it might
make sense to check this problem before the next release as it really
causes memory corruption in case on multiple adjoining polygons. The dirty
hack I use now involves swapping x1 and x2 in cell_list_add_subspan and its
clipping version whenever x1 > x2.

Thank you and best regards,
Ilya

-- 
cairo mailing list
[email protected]
http://lists.cairographics.org/mailman/listinfo/cairo