[Bug 8361] New: Buffer overrun in TOOLTIPS_GetDispInfoW()

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=8361

Summary: Buffer overrun in TOOLTIPS_GetDispInfoW()
           Product: Wine
           Version: 0.9.36.
          Platform: All
        OS/Version: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wine-comctl32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

File tooltips.c, line 395: memcpy() tries to read beyond the ttnmdi.lpszText
buffer limit. Use min() instead of max(), calculating len.