Bug 1818674. r=lsalzman

Differential Revision: https://phabricator.services.mozilla.com/D170847
This commit is contained in:
Timothy Nikkel 2023-02-24 23:41:33 +00:00
parent 0a87908520
commit b9ea148a58

View File

@ -88,8 +88,9 @@ uint8_t* DataAtOffset(DataSourceSurface* aSurface,
"surface size overflows - this should have been prevented when "
"the surface was created");
uint8_t* data = aMap->mData + aPoint.y * aMap->mStride +
aPoint.x * BytesPerPixel(aSurface->GetFormat());
uint8_t* data =
aMap->mData + size_t(aPoint.y) * size_t(aMap->mStride) +
size_t(aPoint.x) * size_t(BytesPerPixel(aSurface->GetFormat()));
if (data < aMap->mData) {
MOZ_CRASH("GFX: out-of-range data access");