bug 137128 patch by paper@animecity.nu r=Roland.Mainz@informatik.med.uni-giessen.de sr=tor

animated gif crashes mozilla

gfx/src/gtk/nsImageGTK.cpp

@@ -1887,6 +1887,9 @@ NS_IMETHODIMP nsImageGTK::DrawToImage(nsIImage* aDstImage,
   if (!dest)
     return NS_ERROR_FAILURE;
     
+  if (aDX >= dest->mWidth || aDY >= dest->mHeight)
+    return NS_OK;
+
   PRUint8 *rgbPtr=0, *alphaPtr=0;
   PRUint32 rgbStride, alphaStride;
 

gfx/src/xlib/nsImageXlib.cpp

@@ -1554,6 +1554,9 @@ NS_IMETHODIMP nsImageXlib::DrawToImage(nsIImage* aDstImage,
   if (!dest)
     return NS_ERROR_FAILURE;
 
+  if (aDX >= dest->mWidth || aDY >= dest->mHeight)
+    return NS_OK;
+
   if (mPendingUpdate)
     UpdateCachedImage();