https://bugs.winehq.org/show_bug.cgi?id=42789
Bernhard Übelacker bernhardu@mailbox.org changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |bernhardu@mailbox.org
--- Comment #2 from Bernhard Übelacker bernhardu@mailbox.org --- Created attachment 60063 --> https://bugs.winehq.org/attachment.cgi?id=60063 Avoid crash in CURSORICON_GetFileEntry by accessing memory beyond mapped file.
Mapped file has just a size of 69120 bytes. Unfortunately in function CURSORICON_GetFileEntry entry->dwDIBOffset contains 1638397.
info = (const BITMAPINFOHEADER *)((const char *)dir + entry->dwDIBOffset);
That way the info variable points to memory outside of the mapped file while qemu manages to have that memory not available.