fix annoying zrle decoding bug

ChangeLog

+2005-06-28  Johannes E. Schindelin  <Johannes.Schindelin@gmx.de>
+	* libvncclient/zrle.c: fix handling of raw and fill subtypes
+	  (off-by-one and off-by-many bug)
+
 2005-06-27  Karl Runge <runge@karlrunge.com>
 	* libvncserver/main.c: move deferUpdateTime and maxRectsPerUpdate
 	  defaults to before rfbProcessArguments().

TODO

 immediate:
 ----------
 
-fix ZRLE errors (-9)
 VisualNaCro testing
 test IRIX -overlay (x11vnc)
 java vncviewer doesn't do colour cursors?

libvncclient/zrle.c

@@ -229,6 +229,7 @@ static int HandleZRLETile(rfbClient* client,
 					((CARDBPP*)client->frameBuffer)[j+i] = UncompressCPixel(buffer);
 #else
 			CopyRectangle(client, buffer, x, y, w, h);
+			buffer+=w*h*REALBPP/8;
 #endif
 			break;
 		}
@@ -241,6 +242,8 @@ static int HandleZRLETile(rfbClient* client,
 				
 			FillRectangle(client, x, y, w, h, color);
 
+			buffer+=REALBPP/8;
+
 			break;
 		}
 		case 2 ... 127: /* packed Palette */