May 1, 2026
7:29 p.m.
Fiddling with the wordpad and riched led me to find another crash. To reproduce this paste a large block of arabic text in wordpad and try changing its font to "Noto Nastaliq Urdu". This will lead to a crash. Now in wrap.c there is a mechanism to grow the buffer in case of OOM. But there was a bounds check missing in `GSUB_apply_MultipleSubst` . If the patch seems busy, then tell me. I will try to think of something better. -- https://gitlab.winehq.org/wine/wine/-/merge_requests/10612#note_138563