gdiplus: Check count argument in GdipTransformMatrixPoints.

5eaf84d3 · Nikolay Sivov · Alexandre Julliard · 4e8ef346 · 5eaf84d3
Commit 5eaf84d3 authored May 13, 2008 by Nikolay Sivov Committed by Alexandre Julliard May 13, 2008
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 1 deletion

matrix.c dlls/gdiplus/matrix.c +4 -1

No files found.
--- a/dlls/gdiplus/matrix.c
+++ b/dlls/gdiplus/matrix.c
@@ -244,7 +244,7 @@ GpStatus WINGDIPAPI GdipTransformMatrixPoints(GpMatrix *matrix, GpPointF *pts,
    REAL x, y;
    INT i;

-    if(!matrix || !pts)
+    if(!matrix || !pts || count <= 0)
        return InvalidParameter;

    for(i = 0; i < count; i++)
@@ -265,6 +265,9 @@ GpStatus WINGDIPAPI GdipTransformMatrixPointsI(GpMatrix *matrix, GpPoint *pts, I
    GpStatus ret;
    INT i;

+    if(count <= 0)
+        return InvalidParameter;
+
    ptsF = GdipAlloc(sizeof(GpPointF) * count);
    if(!ptsF)
        return OutOfMemory;