# HG changeset patch
# User benoit
# Date 1217515994 0
# Node ID 0e9e36d55e5e4064818aa94b4529204b1254814e
# Parent  bb5e8cae1d71c50524b4ef71bc702ca1b498cfed
Fix a potential out of array writing.
Patch by Mathieu Malaterre mathieu malaterre gmail com

diff -r bb5e8cae1d71 -r 0e9e36d55e5e rle.c
--- a/rle.c	Thu Jul 31 12:56:56 2008 +0000
+++ b/rle.c	Thu Jul 31 14:53:14 2008 +0000
@@ -70,9 +70,9 @@
         } else {
             /* fall back on uncompressed */
             count = count_pixels(ptr, w-x, bpp, 0);
+            if(out + bpp*count >= outbuf + out_size) return -1;
             *out++ = (count ^ xor_raw) + add_raw;
 
-            if(out + bpp*count > outbuf + out_size) return -1;
             memcpy(out, ptr, bpp * count);
             out += bpp * count;
         }