| commit | 9de8ea75645d7092f888ddd7572f35204e672757 | |
| author | Roman Pišl <rpisl@seznam.cz> | |
| Mon, 17 Oct 2016 22:34:55 +0000 (18 00:34 +0200) | ||
| committer | Alexandre Julliard <julliard@winehq.org> | |
| Wed, 19 Oct 2016 16:50:12 +0000 (19 09:50 -0700) | ||
| tree | dab618d316a91b2acebd08330378ec58423b9551 | treesnapshot (tar.gz zip) |
| parent | 71bd13391b3cd8d686b552021b918cf1e4f70d31 | commitdiff |
user32: Fix buffer overflow in EDIT_EM_ReplaceSel().
After EN_MAXTEXT notification, available space may be larger than
length of the string. This must be checked and strl must not be
set to a value larger than the actual length of the string.
Signed-off-by: Roman Pišl <rpisl@seznam.cz>
Signed-off-by: Alexandre Julliard <julliard@winehq.org>
After EN_MAXTEXT notification, available space may be larger than
length of the string. This must be checked and strl must not be
set to a value larger than the actual length of the string.
Signed-off-by: Roman Pišl <rpisl@seznam.cz>
Signed-off-by: Alexandre Julliard <julliard@winehq.org>
| dlls/user32/edit.c | diffblobblamehistory |