Marcus Meissner : user32: Fixed single byte array overflow.
Alexandre Julliard
julliard at winehq.org
Mon Sep 12 11:42:56 CDT 2011
Module: wine
Branch: master
Commit: d177a97d287221a26987049ae29cf6e40c80cd2f
URL: http://source.winehq.org/git/wine.git/?a=commit;h=d177a97d287221a26987049ae29cf6e40c80cd2f
Author: Marcus Meissner <marcus at jet.franken.de>
Date: Sat Sep 10 00:40:07 2011 +0200
user32: Fixed single byte array overflow.
---
dlls/user32/wsprintf.c | 4 ++--
1 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/dlls/user32/wsprintf.c b/dlls/user32/wsprintf.c
index fe20536..5e618d6 100644
--- a/dlls/user32/wsprintf.c
+++ b/dlls/user32/wsprintf.c
@@ -316,7 +316,7 @@ static INT wvsnprintfA( LPSTR buffer, UINT maxlen, LPCSTR spec, __ms_va_list arg
WPRINTF_FORMAT format;
LPSTR p = buffer;
UINT i, len, sign;
- CHAR number[20];
+ CHAR number[21]; /* 64bit number can be 18446744073709551616 which is 20 chars. and a \0 */
WPRINTF_DATA argData;
TRACE("%p %u %s\n", buffer, maxlen, debugstr_a(spec));
@@ -421,7 +421,7 @@ static INT wvsnprintfW( LPWSTR buffer, UINT maxlen, LPCWSTR spec, __ms_va_list a
WPRINTF_FORMAT format;
LPWSTR p = buffer;
UINT i, len, sign;
- CHAR number[20];
+ CHAR number[21]; /* 64bit number can be 18446744073709551616 which is 20 chars. and a \0 */
WPRINTF_DATA argData;
TRACE("%p %u %s\n", buffer, maxlen, debugstr_w(spec));
More information about the wine-cvs
mailing list