https://bugs.winehq.org/show_bug.cgi?id=19160
Sebastian Lackner sebastian@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian@fds-team.de
--- Comment #9 from Sebastian Lackner sebastian@fds-team.de --- (In reply to Dmitry Timoshkov from comment #8)
(In reply to Dmitry Timoshkov from comment #7)
Created attachment 52081 [details] patch
Attached patch fixes particular crash in CreateDC16 due to huge (not initialized dmDriverExtra) field. Application still crashes, but in a different place.
It's worth to note that it's almost impossible to test whether it's correct to modify dmDriverExtra in the application provided buffer, since the target app is 16-bit and the test has to be 16-bit as well.
Did you check if the ->Size field contains a valid value? If it also contains some unusual value, Wine should probably ignore the whole struct.