[PATCH 0/1] MR8309: oleaut32: Fix out-of-bound read in OleLoadPicturePath when szURLorPath is empty.

[PATCH 1/1] oleaut32: Fix out-of-bound read in OleLoadPicturePath when szURLorPath is empty.

[Yuxuan Shui]

From: Yuxuan Shui

---
 dlls/oleaut32/olepicture.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/oleaut32/olepicture.c b/dlls/oleaut32/olepicture.c
index 88d3953eb0d..c4559764ae9 100644
--- a/dlls/oleaut32/olepicture.c
+++ b/dlls/oleaut32/olepicture.c
@@ -2670,7 +2670,7 @@ HRESULT WINAPI OleLoadPicturePath( LPOLESTR szURLorPath, LPUNKNOWN punkCaller,
       file_candidate = szURLorPath;

/* Handle candidate DOS paths separately. */
-  if (file_candidate[1] == ':') {
+  if (file_candidate[0] && file_candidate[1] == ':') {
       hRes = create_stream(file_candidate, &stream);
       if (FAILED(hRes))
      return INET_E_RESOURCE_NOT_FOUND;