gdiplus: Check count argument in GdipVectorTransformMatrixPoints.

2d6ae5de · Nikolay Sivov · Alexandre Julliard · 5eaf84d3 · 2d6ae5de
Commit 2d6ae5de authored May 13, 2008 by Nikolay Sivov Committed by Alexandre Julliard May 13, 2008
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

matrix.c dlls/gdiplus/matrix.c +4 -1

No files found.
--- a/dlls/gdiplus/matrix.c
+++ b/dlls/gdiplus/matrix.c
@@ -317,7 +317,7 @@ GpStatus WINGDIPAPI GdipVectorTransformMatrixPoints(GpMatrix *matrix, GpPointF *
    REAL x, y;
    INT i;

-    if(!matrix || !pts)
+    if(!matrix || !pts || count <= 0)
        return InvalidParameter;

    for(i = 0; i < count; i++)
@@ -338,6 +338,9 @@ GpStatus WINGDIPAPI GdipVectorTransformMatrixPointsI(GpMatrix *matrix, GpPoint *
    GpStatus ret;
    INT i;

+    if(count <= 0)
+        return InvalidParameter;
+
    ptsF = GdipAlloc(sizeof(GpPointF) * count);
    if(!ptsF)
        return OutOfMemory;