From 6dbcceb1fef9c3c6b4ec186543ab7ce6e8647df1 Mon Sep 17 00:00:00 2001 From: Robert Kukla Date: Sun, 1 Apr 2007 17:28:46 +0000 Subject: for WPS files with many lines the current wps code will call puts_scroll with y-values greater than the size of the scroll[] array (e.g. gwps-common.c:2063). This is a temporary security measure until viewports and/or wps tokenizer are available... git-svn-id: svn://svn.rockbox.org/rockbox/trunk@12992 a1c6a512-1295-4272-9138-f99709370657 --- firmware/drivers/lcd-16bit.c | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'firmware/drivers/lcd-16bit.c') diff --git a/firmware/drivers/lcd-16bit.c b/firmware/drivers/lcd-16bit.c index 7269e54dcd..67736ddf85 100644 --- a/firmware/drivers/lcd-16bit.c +++ b/firmware/drivers/lcd-16bit.c @@ -848,6 +848,8 @@ void lcd_invertscroll(int x, int y) (void)x; + if(y>=SCROLLABLE_LINES) return; + s = &scroll[y]; s->invert = !s->invert; } @@ -898,6 +900,8 @@ void lcd_puts_scroll_style_offset(int x, int y, const unsigned char *string, struct scrollinfo* s; int w, h; + if(y>=SCROLLABLE_LINES) return; + s = &scroll[y]; s->start_tick = current_tick + scroll_delay; -- cgit v1.2.3