Aric Stewart : usp10: Correct buffer reading overrun.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 85d33f41398568f967e7139b5d524fe72ba94621
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=85d33f41398568f967e7139b5d...

Author: Aric Stewart <aric(a)codeweavers.com>
Date:   Fri Oct 14 08:24:58 2011 -0500

usp10: Correct buffer reading overrun.

Found by Dan Kegel using valgrind.

---

 dlls/usp10/indic.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)

diff --git a/dlls/usp10/indic.c b/dlls/usp10/indic.c
index 43bf0e5..a25ceec 100644
--- a/dlls/usp10/indic.c
+++ b/dlls/usp10/indic.c
@@ -333,6 +333,8 @@ void Indic_ReorderCharacters( HDC hdc, SCRIPT_ANALYSIS *psa, ScriptCache* psc, L
         while((next < cChar) && lex(input[next]) == lex_Generic)
             next++;
         index = next;
+        if (next >= cChar)
+            break;
         next = Indic_process_next_syllable(input, cChar, 0, ¢er, index, lex);
         if (next != -1)
         {