From 5f9e67f13d4784be736be178389914b2648749ed Mon Sep 17 00:00:00 2001
From: Ingo <heckflosse@i-weyrich.de>
Date: Tue, 7 May 2013 15:29:55 +0200
Subject: [PATCH] Memory corruption in cfa_linedn, Issue 1862

---
 rtengine/cfa_linedn_RT.cc | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/rtengine/cfa_linedn_RT.cc b/rtengine/cfa_linedn_RT.cc
index 1a55f0866..db497d01c 100644
--- a/rtengine/cfa_linedn_RT.cc
+++ b/rtengine/cfa_linedn_RT.cc
@@ -116,8 +116,8 @@ void RawImageSource::CLASS cfa_linedn(float noise)
 				indx1=numcols % 16;
 				for (int i=0; i<(16-indx1); i++) 
 					for (int rr=0; rr<numrows; rr++) 
-			
-						cfain[(rr)*TS+numcols+i+1]=cfain[(rr)*TS+numcols-i];
+						cfain[(rr)*TS+numcols+i]=cfain[(rr)*TS+numcols-i-1];
+
 				numcols += 16-indx1;
 			}
 			
@@ -125,8 +125,8 @@ void RawImageSource::CLASS cfa_linedn(float noise)
 				indx1=numrows % 16;
 				for (int i=0; i<(16-indx1); i++)
 					for (int cc=0; cc<numcols; cc++)
-		
-						cfain[(numrows+i+1)*TS+cc]=cfain[(numrows-i)*TS+cc];
+						cfain[(numrows+i)*TS+cc]=cfain[(numrows-i-1)*TS+cc];
+
 				numrows += 16-indx1;
 			}