[PATCH] comctl32: allocate the right wstr size for the TVN_GETDISPINFOW reply

[Damjan Jovanovic]

The code doesn't multiply the strlenW() by sizeof(WCHAR),
allocating a buffer that is half the needed size, and
resulting in a guaranteed buffer overflow and heap corruption
when lstrcpyW() later copies the string.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=25264

Signed-off-by: Damjan Jovanovic 
---
 dlls/comctl32/treeview.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

[Nikolay Sivov]

Signed-off-by: Nikolay Sivov