[PATCH] comctl32: allocate the right wstr size for the TVN_GETDISPINFOW reply
26 Nov
2019
26 Nov
'19
4:08 p.m.
The code doesn't multiply the strlenW() by sizeof(WCHAR), allocating a buffer that is half the needed size, and resulting in a guaranteed buffer overflow and heap corruption when lstrcpyW() later copies the string. Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=25264 Signed-off-by: Damjan Jovanovic <damjan.jov(a)gmail.com> --- dlls/comctl32/treeview.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
2298
Age (days ago)
2298
Last active (days ago)
1 comments
2 participants
participants (2)
-
Damjan Jovanovic -
Nikolay Sivov