Re: [PATCH 0/1] MR6198: gdi32: Bounds check EMF handle tables.

[Huw Davies (＠huw)]

Huw Davies (@huw) commented about dlls/gdi32/enhmetafile.c:
>  case EMR_SELECTOBJECT:
>    {
>
> const EMRSELECTOBJECT *pSelectObject = (const EMRSELECTOBJECT *)mr;
> - if (pSelectObject->ihObject >= info->header->nHandles) break;

Can't we compare to `handles` instead?