PolyBezier: the point count must be 3n+1.

23be696d · Yoshiro Takeno · Alexandre Julliard · 72323cb6 · 23be696d
Commit 23be696d authored Jan 23, 2004 by Yoshiro Takeno Committed by Alexandre Julliard Jan 23, 2004
Hide whitespace changes
Inline Side-by-side

Showing with 5 additions and 1 deletion

painting.c graphics/painting.c +5 -1

No files found.
--- a/graphics/painting.c
+++ b/graphics/painting.c
@@ -695,8 +695,12 @@ BOOL WINAPI FloodFill( HDC hdc, INT x, INT y, COLORREF color )
 BOOL WINAPI PolyBezier( HDC hdc, const POINT* lppt, DWORD cPoints )
 {
    BOOL ret = FALSE;
-    DC * dc = DC_GetDCUpdate( hdc );
+    DC * dc;
+
+    /* cPoints must be 3 * n + 1 (where n>=1) */
+    if (cPoints == 1 || (cPoints % 3) != 1) return FALSE;

+    dc = DC_GetDCUpdate( hdc );
    if(!dc) return FALSE;

    if(PATH_IsPathOpen(dc->path))