--- sourceforge.net/trunk/rdesktop/cache.c 2003/05/30 21:31:59 379 +++ sourceforge.net/trunk/rdesktop/cache.c 2003/12/24 17:23:03 563 @@ -162,6 +162,9 @@ { int length = cx * cy * bytes_per_pixel; + if (offset > sizeof(g_deskcache)) + offset = 0; + if ((offset + length) <= sizeof(g_deskcache)) { return &g_deskcache[offset]; @@ -177,6 +180,9 @@ { int length = cx * cy * bytes_per_pixel; + if (offset > sizeof(g_deskcache)) + offset = 0; + if ((offset + length) <= sizeof(g_deskcache)) { cx *= bytes_per_pixel;