libfreerdp-codec: fix crash when decompressing large nsc bitmaps
authorAnthony Tong <atong@trustedcs.com>
Tue, 8 Nov 2011 22:55:47 +0000 (17:55 -0500)
committerAnthony Tong <atong@trustedcs.com>
Tue, 8 Nov 2011 23:12:39 +0000 (18:12 -0500)
libfreerdp-codec/nsc.c

index be4bb38..02fec69 100644 (file)
@@ -264,7 +264,8 @@ void nsc_rle_decode(STREAM* in, STREAM* out, uint32 origsz)
 void nsc_rle_decompress_data(NSC_CONTEXT* context)
 {
        STREAM* rles;
-       uint16 i, origsize;
+       uint16 i;
+       uint32 origsize;
        rles = stream_new(0);
        rles->p = rles->data = context->nsc_stream->pdata->p;
        rles->size = context->nsc_stream->pdata->size;