From 9d801dd4c8e42bada7cc5306f4693efbba8dac3a Mon Sep 17 00:00:00 2001 From: "estade@chromium.org" Date: Fri, 13 Feb 2009 18:44:19 +0000 Subject: Fix an off-by-one error in posix backing store scrolling. This error (sometimes) caused a crash when scrolling all the way to the bottom of a page and then attempting to scroll back up. Review URL: http://codereview.chromium.org/20361 git-svn-id: svn://svn.chromium.org/chrome/trunk/src@9768 0039d316-1c4b-4281-b951-d872f2087c98 --- chrome/browser/renderer_host/backing_store_posix.cc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'chrome/browser/renderer_host') diff --git a/chrome/browser/renderer_host/backing_store_posix.cc b/chrome/browser/renderer_host/backing_store_posix.cc index 1ff62be..f925ef9 100644 --- a/chrome/browser/renderer_host/backing_store_posix.cc +++ b/chrome/browser/renderer_host/backing_store_posix.cc @@ -113,7 +113,7 @@ void BackingStore::ScrollRect(base::ProcessHandle process, } else { // Move |x| to the first pixel of the last row of the clip rect. x += clip_rect.x() * 4; - x += clip_rect.bottom() * stride; + x += (clip_rect.bottom() - 1) * stride; for (int i = clip_rect.y(); i < clip_rect.height() + dy; ++i) { memcpy(x, x + stride * dy, len); -- cgit v1.1