Fix crash on broken documents

Issue #1320

1 files changed, 3 insertions, 0 deletions

diff --git a/splash/Splash.cc b/splash/Splash.cc
index 05f000d9..0dbd0c0e 100644
--- a/splash/Splash.cc
+++ b/splash/Splash.cc
@@ -3892,6 +3892,9 @@ SplashError Splash::arbitraryTransformImage(SplashImageSource src, SplashICCTran
             if (xa == xb) {
                 ++xb;
             }
+            if (unlikely(clipRes == splashClipAllInside && xb > bitmap->getWidth())) {
+                xb = bitmap->getWidth();
+            }
             if (clipRes != splashClipAllInside) {
                 clipRes2 = state->clip->testSpan(xa, xb - 1, y);
             } else {