From d9bf1e5fca30a89603accff808b2452750333cb6 Mon Sep 17 00:00:00 2001
From: Armin Novak <armin.novak@thincast.com>
Date: Thu, 30 Apr 2026 15:03:21 +0200
Subject: [PATCH] [codec,planar] fix bounds checks

---
 libfreerdp/codec/planar.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/libfreerdp/codec/planar.c b/libfreerdp/codec/planar.c
index 58efbc627..0c4129fb1 100644
--- a/libfreerdp/codec/planar.c
+++ b/libfreerdp/codec/planar.c
@@ -958,12 +958,12 @@ BOOL planar_decompress(BITMAP_PLANAR_CONTEXT* WINPR_RESTRICT planar,
 				return FALSE;
 			}

-			if ((nXDst + nSrcWidth) * bpp > nDstStep)
+			if ((nXDst + nSrcWidth) * bpp > nTempStep)
 			{
 				WLog_ERR(TAG,
 				         "planar plane destination (X %" PRIu32 " + width %" PRIu32
 				         ") * bpp %" PRIu32 " exceeds stride %" PRIu32,
-				         nXDst, nSrcWidth, bpp, nDstStep);
+				         nXDst, nSrcWidth, bpp, nTempStep);
 				return FALSE;
 			}

--
2.52.0