Esme Povirk (@madewokherd) commented about dlls/gdiplus/image.c:
- else
- {
if (paramsize != size)return InvalidParameter;- }
- if (!effect->params)
effect->params = malloc(size);- else
effect->params = realloc(effect->params, size);- if (effect->type == RedEyeCorrectionEffect)
- {
num = (size-paramsize)/sizeof(RECT);((struct RedEyeCorrectionParams *)effect->params)->numberOfAreas = num;memcpy(((struct RedEyeCorrectionParams *)params)->areas, ((struct RedEyeCorrectionParams *)effect->params)->areas, num*sizeof(RECT));
Where is the `areas` field initialized?