[PATCH v2 1/1] comctl32: fixed first we check index then array access by index is safe

[Herman Semenov]

From: Herman Semenov

---
 dlls/comctl32/toolbar.c | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/dlls/comctl32/toolbar.c b/dlls/comctl32/toolbar.c
index 690a02db6ee..26d662d1a44 100644
--- a/dlls/comctl32/toolbar.c
+++ b/dlls/comctl32/toolbar.c
@@ -3240,11 +3240,12 @@ static LRESULT
 TOOLBAR_DeleteButton (TOOLBAR_INFO *infoPtr, INT nIndex)
 {
     NMTOOLBARW nmtb;
-    TBUTTON_INFO *btnPtr = &infoPtr->buttons[nIndex];

if ((nIndex < 0) || (nIndex >= infoPtr->nNumButtons))
         return FALSE;

+    TBUTTON_INFO *btnPtr = &infoPtr->buttons[nIndex];
+
     memset(&nmtb, 0, sizeof(nmtb));
     nmtb.iItem = btnPtr->idCommand;
     nmtb.tbButton.iBitmap = btnPtr->iBitmap;
@@ -3545,10 +3546,11 @@ TOOLBAR_GetItemRect (const TOOLBAR_INFO *infoPtr, INT nIndex, LPRECT lpRect)
 {
     TBUTTON_INFO *btnPtr;

-    btnPtr = &infoPtr->buttons[nIndex];
     if ((nIndex < 0) || (nIndex >= infoPtr->nNumButtons))
    return FALSE;

+    btnPtr = &infoPtr->buttons[nIndex];
+
     if (lpRect == NULL)
    return FALSE;
     if (btnPtr->fsState & TBSTATE_HIDDEN)
@@ -3596,10 +3598,12 @@ TOOLBAR_GetRect (const TOOLBAR_INFO *infoPtr, INT Id, LPRECT lpRect)
     INT        nIndex;

nIndex = TOOLBAR_GetButtonIndex (infoPtr, Id, FALSE);
-    btnPtr = &infoPtr->buttons[nIndex];
+
     if ((nIndex < 0) || (nIndex >= infoPtr->nNumButtons))
    return FALSE;

+    btnPtr = &infoPtr->buttons[nIndex];
+
     if (lpRect == NULL)
    return FALSE;