From: Alex Henrie <alexhenrie24@gmail.com> If GetProcAddress16 is called with a name longer than 255 characters, the strcpy in NE_GetOrdinal would overflow. --- dlls/krnl386.exe16/ne_module.c | 1 + 1 file changed, 1 insertion(+) diff --git a/dlls/krnl386.exe16/ne_module.c b/dlls/krnl386.exe16/ne_module.c index bfb3263f9e4..8653db0be17 100644 --- a/dlls/krnl386.exe16/ne_module.c +++ b/dlls/krnl386.exe16/ne_module.c @@ -1663,6 +1663,7 @@ FARPROC16 WINAPI GetProcAddress16( HMODULE16 hModule, LPCSTR name ) if (HIWORD(name) != 0) { + if (strlen(name) > 255) return NULL; ordinal = NE_GetOrdinal( hModule, name ); TRACE("%04x '%s'\n", hModule, name ); } -- GitLab https://gitlab.winehq.org/wine/wine/-/merge_requests/11049