bug 137128 patch by paper@animecity.nu r=Roland.Mainz@informatik.med.uni-giessen.de sr=tor

animated gif crashes mozilla

gfx/src/gtk/nsImageGTK.cpp

@@ -1886,6 +1886,9 @@ NS_IMETHODIMP nsImageGTK::DrawToImage(nsIImage* aDstImage,
 
   if (!dest)
     return NS_ERROR_FAILURE;
+    
+  if (aDX >= dest->mWidth || aDY >= dest->mHeight)
+    return NS_OK;
 
   PRUint8 *rgbPtr=0, *alphaPtr=0;
   PRUint32 rgbStride, alphaStride;

gfx/src/xlib/nsImageXlib.cpp

@@ -1554,6 +1554,9 @@ NS_IMETHODIMP nsImageXlib::DrawToImage(nsIImage* aDstImage,
   if (!dest)
     return NS_ERROR_FAILURE;
 
+  if (aDX >= dest->mWidth || aDY >= dest->mHeight)
+    return NS_OK;
+
   if (mPendingUpdate)
     UpdateCachedImage();