Alexandre Julliard (@julliard) commented about dlls/hhctrl.ocx/chm.c:
chm->strings_size*sizeof(char*));
if(!new_strings)
return NULL;
chm->strings = new_strings;
}else {
chm->strings = heap_alloc_zero(
chm->strings_size*sizeof(char*));
if(!chm->strings)
return NULL;
}
new_strings_size = (offset >> BLOCK_BITS) + 1;
new_strings = realloc(chm->strings, new_strings_size * sizeof(char*));
if(!new_strings)
return NULL;
memset(new_strings + (offset >> BLOCK_BITS), 0, sizeof(char*));
This doesn't look right.