mirror of
https://salsa.debian.org/xorg-team/lib/pixman
synced 2025-09-01 10:35:16 +00:00
2f876cf867
This trapezoid causes a crash due to an underflow in the pixman_trapezoid_valid(). Test case from Ritesh Khadgaray.
40 lines
545 B
C
40 lines
545 B
C
#include <stdlib.h>
|
|
#include "utils.h"
|
|
|
|
int
|
|
main()
|
|
{
|
|
pixman_image_t *dst;
|
|
pixman_trapezoid_t traps[] = {
|
|
{
|
|
2147483646,
|
|
2147483647,
|
|
{
|
|
{ 0, 0 },
|
|
{ 0, 2147483647 }
|
|
},
|
|
{
|
|
{ 65536, 0 },
|
|
{ 0, 2147483647 }
|
|
}
|
|
},
|
|
{
|
|
32768,
|
|
- 2147483647,
|
|
{
|
|
{ 0, 0 },
|
|
{ 0, 2147483647 }
|
|
},
|
|
{
|
|
{ 65536, 0 },
|
|
{ 0, 2147483647 }
|
|
}
|
|
},
|
|
};
|
|
|
|
dst = pixman_image_create_bits (PIXMAN_a8, 1, 1, NULL, -1);
|
|
|
|
pixman_add_trapezoids (dst, 0, 0, ARRAY_LENGTH (traps), traps);
|
|
return (0);
|
|
}
|