[Bug 20850] Write buffer overflow in WidenPath()

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=20850





--- Comment #1 from Nikolay Sivov <bunglehead at gmail.com>  2009-11-28 01:43:44 ---
(In reply to comment #0)
> Looking at WidenPath(), it seems that maybe numStrokes should
> start at 1, not 0?

Yeah, I think you're right, this looks pretty odd:
---
    numStrokes = 0;

    pStrokes = HeapAlloc(GetProcessHeap(), 0, numStrokes * sizeof(GdiPath*));
---

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.