comctl32: fix buffer length calculation (bug #8361)

hto at mail.cnt.ru hto at mail.cnt.ru
Fri May 11 12:21:53 CDT 2007


-------------- next part --------------
--- wine-0.9.36-orig/dlls/comctl32/tooltips.c	2007-05-11 16:59:38.000000000 +0000
+++ wine-0.9.36/dlls/comctl32/tooltips.c	2007-05-11 11:11:04.000000000 +0000
@@ -389,7 +389,7 @@ static void TOOLTIPS_GetDispInfoW(HWND h
                 sizeof(ttnmdi.szText)/sizeof(ttnmdi.szText[0]) : INFOTIPSIZE-1;
         lstrcpynW(infoPtr->szTipText, ttnmdi.lpszText, max_len);
         if (ttnmdi.uFlags & TTF_DI_SETITEM) {
-            INT len = max(strlenW(ttnmdi.lpszText), max_len);
+            INT len = min(strlenW(ttnmdi.lpszText), max_len);
             toolPtr->hinst = 0;
             toolPtr->lpszText =	Alloc ((len+1) * sizeof(WCHAR));
             memcpy(toolPtr->lpszText, ttnmdi.lpszText, (len+1) * sizeof(WCHAR));


More information about the wine-patches mailing list