Paul Gofman : winex11.drv: Fix buffer allocation size in import_xdnd_selection().

[Alexandre Julliard]

Module: wine
Branch: master
Commit: af3014b3e1a7684c7934b807906baf93d7562bc4
URL:    https://gitlab.winehq.org/wine/wine/-/commit/af3014b3e1a7684c7934b807906baf9...

Author: Paul Gofman 
Date:   Mon Aug 14 15:38:49 2023 -0600

winex11.drv: Fix buffer allocation size in import_xdnd_selection().

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=55443

---

dlls/winex11.drv/clipboard.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/winex11.drv/clipboard.c b/dlls/winex11.drv/clipboard.c
index 959b59825e1..6f233418105 100644
--- a/dlls/winex11.drv/clipboard.c
+++ b/dlls/winex11.drv/clipboard.c
@@ -1308,7 +1308,7 @@ struct format_entry *import_xdnd_selection( Display *display, Window win, Atom s
         if (!(data = import_selection( display, win, selection, format, &size ))) continue;

entry_size = (FIELD_OFFSET( struct format_entry, data[size] ) + 7) & ~7;
-        if (buf_size < size + entry_size)
+        if (buf_size < *ret_size + entry_size)
         {
             if (!(tmp = realloc( ret, *ret_size + entry_size + 1024 ))) continue;
             ret = tmp;