From 1c4f61ec5068a5935eb6d5dd1d6f2c0275b70529 Mon Sep 17 00:00:00 2001 From: Chris Wilson Date: Tue, 29 Sep 2009 03:01:37 +0100 Subject: [PATCH] [tessellator] Invalid conversion of list head to edge. When scanning for collinear right edges, we need to check that we do not go beyond the end of the array. --- src/cairo-bentley-ottmann-rectangular.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/cairo-bentley-ottmann-rectangular.c b/src/cairo-bentley-ottmann-rectangular.c index 53faba6b4..9887b8242 100644 --- a/src/cairo-bentley-ottmann-rectangular.c +++ b/src/cairo-bentley-ottmann-rectangular.c @@ -380,6 +380,8 @@ _active_edges_to_traps (cairo_bo_sweep_line_t *sweep, break; } + if (right->link.next == &sweep->sweep) + break; right = link_to_edge (right->link.next); } }