From c00ded589a5fe8b8cb3da51c6e0415cfbcd49356 Mon Sep 17 00:00:00 2001
From: Ge van Geldorp <gvg@reactos.com>
Date: Sun, 18 Sep 2005 12:29:35 +0000
Subject: [PATCH] Do some bounds checking on iOrder.

---
 dlls/comctl32/header.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/dlls/comctl32/header.c b/dlls/comctl32/header.c
index 356f31255f0..e185ad4cb92 100644
--- a/dlls/comctl32/header.c
+++ b/dlls/comctl32/header.c
@@ -930,6 +930,10 @@ HEADER_InsertItemA (HWND hwnd, WPARAM wParam, LPARAM lParam)
         nItem = infoPtr->uNumItem;
 
     iOrder = (phdi->mask & HDI_ORDER) ? phdi->iOrder : nItem;
+    if (iOrder < 0)
+        iOrder = 0;
+    else if (infoPtr->uNumItem < iOrder)
+        iOrder = infoPtr->uNumItem;
 
     if (infoPtr->uNumItem == 0) {
         infoPtr->items = Alloc (sizeof (HEADER_ITEM));
-- 
2.11.4.GIT