[PATCH] user32: Pass the modifiable string buffer directly to TEXT_NextLineW().