Francois Gouget : regedit: Fix a buffer allocation in export_registry_key() .

[Alexandre Julliard]

Module: wine
Branch: master
Commit: d92c976803647e4ae75ac9ca4fb7d0e5ad9bacfc
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=d92c976803647e4ae75ac9ca4f...

Author: Francois Gouget 
Date:   Thu Nov 20 20:41:04 2008 +0100

regedit: Fix a buffer allocation in export_registry_key().

This fixes a major buffer overflow bug in 'regedit /E'.

---

programs/regedit/regproc.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/programs/regedit/regproc.c b/programs/regedit/regproc.c
index c070ab0..6d04a44 100644
--- a/programs/regedit/regproc.c
+++ b/programs/regedit/regproc.c
@@ -1239,7 +1239,7 @@ BOOL export_registry_key(WCHAR *file_name, WCHAR *reg_key_name, DWORD format)
     val_name_buf = HeapAlloc(GetProcessHeap(), 0,
                              val_name_size * sizeof(*val_name_buf));
     val_buf = HeapAlloc(GetProcessHeap(), 0, val_size);
-    line_buf = HeapAlloc(GetProcessHeap(), 0, line_buf_size);
+    line_buf = HeapAlloc(GetProcessHeap(), 0, line_buf_size * sizeof(*line_buf));
     CHECK_ENOUGH_MEMORY(reg_key_name_buf && val_name_buf && val_buf && line_buf);

if (reg_key_name && reg_key_name[0]) {