Alexandre Julliard : vbscript: Fix a memory allocation size to avoid overflows.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 9fe25eae4a185aa6c6959b5b589222cfe491e59c
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=9fe25eae4a185aa6c6959b5b58...

Author: Alexandre Julliard 
Date:   Fri Sep 16 19:36:52 2011 +0200

vbscript: Fix a memory allocation size to avoid overflows.

---

dlls/vbscript/vbdisp.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/vbscript/vbdisp.c b/dlls/vbscript/vbdisp.c
index c1eba23..14fb8b0 100644
--- a/dlls/vbscript/vbdisp.c
+++ b/dlls/vbscript/vbdisp.c
@@ -398,7 +398,7 @@ HRESULT create_vbdisp(const class_desc_t *desc, vbdisp_t **ret)
 {
     vbdisp_t *vbdisp;

-    vbdisp = heap_alloc_zero(sizeof(*vbdisp) + (desc->prop_cnt-1)*sizeof(VARIANT));
+    vbdisp = heap_alloc_zero( FIELD_OFFSET( vbdisp_t, props[desc->prop_cnt] ));
     if(!vbdisp)
         return E_OUTOFMEMORY;