Rémi Bernon : dwrite: Avoid memcpy source overflow in GetFontAxisValues.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 0908161bbde1a0bce914f076ffd0358b90e4543b
URL:    https://gitlab.winehq.org/wine/wine/-/commit/0908161bbde1a0bce914f076ffd0358...

Author: Rémi Bernon 
Date:   Thu Nov 17 01:00:46 2022 +0100

dwrite: Avoid memcpy source overflow in GetFontAxisValues.

---

dlls/dwrite/font.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/dwrite/font.c b/dlls/dwrite/font.c
index d2d2b7963f7..5e1fb1c8cbf 100644
--- a/dlls/dwrite/font.c
+++ b/dlls/dwrite/font.c
@@ -7039,7 +7039,7 @@ static HRESULT WINAPI fontfacereference1_GetFontAxisValues(IDWriteFontFaceRefere
     if (value_count < reference->axis_values_count)
         return E_NOT_SUFFICIENT_BUFFER;

-    memcpy(axis_values, reference->axis_values, value_count * sizeof(*axis_values));
+    memcpy(axis_values, reference->axis_values, reference->axis_values_count * sizeof(*axis_values));

return S_OK;
 }