--- sourceforge.net/trunk/rdesktop/cache.c 2003/12/11 17:20:01 562 +++ sourceforge.net/trunk/rdesktop/cache.c 2003/12/24 17:23:03 563 @@ -162,6 +162,9 @@ { int length = cx * cy * bytes_per_pixel; + if (offset > sizeof(g_deskcache)) + offset = 0; + if ((offset + length) <= sizeof(g_deskcache)) { return &g_deskcache[offset]; @@ -177,6 +180,9 @@ { int length = cx * cy * bytes_per_pixel; + if (offset > sizeof(g_deskcache)) + offset = 0; + if ((offset + length) <= sizeof(g_deskcache)) { cx *= bytes_per_pixel;