Re: [PATCH] user32/menu: Inside HiliteMenuItem free menu earlier to avoid crash

[Dmitry Timoshkov]

Fabian Maurer  wrote:
>  if (!(menu = find_menu_item(hMenu, wItemID, wHilite, &pos))) return FALSE;
>
> - handle_menu = menu->obj.handle;
> - release_menu_ptr(menu);
> - if (menu->FocusedItem != pos)
>    {

Now you are accessing the menu contents after the release_menu_ptr().