fix segfault when trying to write outside of frameBuffer

libvncserver/font.c

@@ -24,7 +24,7 @@ int rfbDrawChar(rfbScreenInfoPtr rfbScreen,rfbFontDataPtr font,
 	d=*data;
 	data++;
       }
-      if(d&0x80)
+      if(d&0x80 && y+j>=0 && x+i>=0 && y+j<rfbScreen->height && x+i<rfbScreen->width)
 	memcpy(rfbScreen->frameBuffer+(y+j)*rowstride+(x+i)*bpp,colour,bpp);
       d<<=1;
     }