[Bug 13319] In dlls/user32/edit.c EDIT_EM_ReplaceSel Clobbers Important Var When Buffer Overflows

wine-bugs at winehq.org wine-bugs at winehq.org
Thu May 29 12:30:15 CDT 2008


http://bugs.winehq.org/show_bug.cgi?id=13319





--- Comment #9 from Bob Smith <bsmith at sudleyplace.com>  2008-05-29 12:30:15 ---
(In reply to comment #8)
> I compiled and ran your test program under wine. (Just change EditWndProcW to
> EditWndProc) and it doesn't look like strl ever becomes greater than
> strlenW(lpsz_replace).

1.  I assume you also changed the value of LECWNDCLASS.

2.  Did you insert the debug statements into EDIT.C?

3.  The default buffer size is 30000 bytes in my configuration.  What is it in
yours?


-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the wine-bugs mailing list