Esme Povirk (@madewokherd) commented about dlls/gdiplus/image.c:
- else
- {
if (paramsize != size)
return InvalidParameter;
- }
- if (!effect->params)
effect->params = malloc(size);
- else
effect->params = realloc(effect->params, size);
- if (effect->type == RedEyeCorrectionEffect)
- {
num = (size-paramsize)/sizeof(RECT);
((struct RedEyeCorrectionParams *)effect->params)->numberOfAreas = num;
memcpy(((struct RedEyeCorrectionParams *)params)->areas, ((struct RedEyeCorrectionParams *)effect->params)->areas, num*sizeof(RECT));
Where is the `areas` field initialized?