diff --git a/libfreerdp/core/orders.c b/libfreerdp/core/orders.c index bac9dc113..e053bd480 100644 --- a/libfreerdp/core/orders.c +++ b/libfreerdp/core/orders.c @@ -2548,7 +2548,7 @@ static CACHE_BRUSH_ORDER* update_read_cache_brush_order(rdpUpdate* update, wStre Stream_Read_UINT8(s, cache_brush->index); /* cacheEntry (1 byte) */ Stream_Read_UINT8(s, iBitmapFormat); /* iBitmapFormat (1 byte) */ - if (iBitmapFormat > ARRAYSIZE(BMF_BPP)) + if (iBitmapFormat >= ARRAYSIZE(BMF_BPP)) goto fail; cache_brush->bpp = BMF_BPP[iBitmapFormat];