[client] fixed incorrect cursor dataPos validation

This commit is contained in:
Geoffrey McRae 2017-12-30 13:48:32 +11:00
parent 9b7f54fa35
commit e854723aa3

View File

@ -234,7 +234,7 @@ int cursorThread(void * unused)
break; break;
// check the data position is sane // check the data position is sane
const uint64_t dataSize = header.detail.frame.height * header.detail.frame.pitch; const uint64_t dataSize = header.detail.cursor.height * header.detail.cursor.pitch;
if (header.detail.cursor.dataPos + dataSize > state.shmSize) if (header.detail.cursor.dataPos + dataSize > state.shmSize)
{ {
DEBUG_ERROR("The guest sent an invalid mouse dataPos"); DEBUG_ERROR("The guest sent an invalid mouse dataPos");