Re: [PATCH 0/1] MR8180: crypt32: Fix use-after-free in CRYPT_ImportSystemRootCertsToReg.

[Paul Gofman (＠gofman)]

On Mon Jun  2 15:13:56 2025 +0000, Paul Gofman wrote:
> Actually, even better would be to just CertDuplicateStore in
> CRYPT_CreateChainEngine() if 'root' is not NULL, that would be normal
> idiomatic behaviour for this function. Also, it looks like
> CRYPT_CreateChainEngine() is only used with non-NULL root from this
> place in rootstore.c, other usages just pass NULL there.

Between the lines of this I sent https://gitlab.winehq.org/wine/wine/-/merge_requests/8199 .