Sebastian Lackner : webservices: Fix invalid memory access in remove_header.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 4358f7c39ecc013855a9bd0b3d062a7b1016f16b
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=4358f7c39ecc013855a9bd0b3d...

Author: Sebastian Lackner <sebastian(a)fds-team.de>
Date:   Wed Aug 31 21:09:25 2016 +0200

webservices: Fix invalid memory access in remove_header.

Signed-off-by: Sebastian Lackner <sebastian(a)fds-team.de>
Signed-off-by: Hans Leidekker <hans(a)codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard(a)winehq.org>

---

 dlls/webservices/msg.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/webservices/msg.c b/dlls/webservices/msg.c
index 6fcd046..e7da06f 100644
--- a/dlls/webservices/msg.c
+++ b/dlls/webservices/msg.c
@@ -787,7 +787,7 @@ HRESULT WINAPI WsSetHeader( WS_MESSAGE *handle, WS_HEADER_TYPE type, WS_TYPE val
 static void remove_header( struct msg *msg, ULONG i )
 {
     free_header( msg->header[i] );
-    memmove( &msg->header[i], &msg->header[i + 1], (msg->header_count - i) * sizeof(struct header *) );
+    memmove( &msg->header[i], &msg->header[i + 1], (msg->header_count - i - 1) * sizeof(struct header *) );
     msg->header_count--;
 }