http://bugs.winehq.org/show_bug.cgi?id=60088 --- Comment #6 from Veliga Syutkin <veliga99@gmail.com> --- Tested this patch against current git master (Wine 11.14, 1012f3d9, fetched 2026-07-29) with your 3 hunks applied to dlls/ole32/storage32.c — nothing else changed. Two independent checks, both confirm the fix: 1. Targeted unit test. Added a test reproducing the exact sequence Publisher uses (CreateStream(L"EscherDelayTemp") → RenameElement(..., L"EscherDelayStm")), then reading back the raw on-disk directory entry. - Without the patch: sizeOfNameString = 32 (the bug, matches the corrupted file from comment #3). - With the patch: sizeOfNameString = 30 (correct, matches the compound-file spec you cited). 2. Real-world repro. Built the patched Wine, installed MS Office Publisher 2003 into a clean prefix, opened the original corrupted .pub from this bug and re-saved it. Byte-inspecting the resulting file (checked two independent ways) confirms EscherDelayStm's declared name length is now 30, with a clean single null terminator — matches what real Windows expects. Patch looks correct to me, including the added bounds check for the symmetric case (renaming to a name longer than the buffer). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.