[Bug 45105] heap-buffer overflow in gdi32