Re: [PATCH v4 0/1] MR11347: wininet: Fix out-of-bounds read in InternetCrackUrlW for empty file paths.

[Jacek Caban (＠jacek)]

Jacek Caban (@jacek) commented about dlls/wininet/internet.c:
> if (*lpszcp == '/')
>              {
> +                HRESULT hr;
>                  len = MAX_PATH;
> -                PathCreateFromUrlW(lpszUrl, tmppath, &len, 0);
> +                hr = PathCreateFromUrlW(lpszUrl, tmppath, &len, 0);
> +                if (FAILED(hr))
> +                {
> +                    SetLastError(ERROR_INSUFFICIENT_BUFFER);
> +                    return FALSE;
> +                }
>              }
>              else
>              {
>                  WCHAR *iter;
> +                if (len >= MAX_PATH)

This seems unrelated to the problem from the commit message. Is it a limitation on Windows too?

-- 
https://gitlab.winehq.org/wine/wine/-/merge_requests/11347#note_145861