[Bug 28737] New: shell32: invalid free in BrsFolderDlgProc in func_brsfolder in "make brsfolder.ok"?

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=28737

             Bug #: 28737
           Summary: shell32: invalid free in BrsFolderDlgProc in
                    func_brsfolder in "make brsfolder.ok"?
           Product: Wine
           Version: 1.3.30
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: shell32
        AssignedTo: wine-bugs at winehq.org
        ReportedBy: dank at kegel.com
    Classification: Unclassified


While running "make brsfolder.ok" in shell32/tests, valgrind complains:

fixme:shell:BrsFolder_OnCreate flags BIF_NEWDIALOGSTYLE partially implemented
Invalid free() / delete / delete[]
   at  notify_free (heap.c:262)
   by  RtlFreeHeap (heap.c:1748)
   by  IMalloc_fnFree (ifs.c:262)
   by  CoTaskMemFree (ifs.c:411)
   by  SHFree (shellole.c:330)
   by  BrsFolderDlgProc (brsfolder.c:462)
   by  ??? (in dlls/user32/user32.dll.so)
   by  call_dialog_proc (winproc.c:263)
   by  WINPROC_CallDlgProcW (winproc.c:1045)
   by  DefDlgProcW (defdlg.c:425)
   by  ??? (in dlls/user32/user32.dll.so)
   by  call_window_proc (winproc.c:242)
   by  WINPROC_call_window (winproc.c:899)
   by  call_window_proc (message.c:2211)
   by  send_message (message.c:3084)
   by  SendMessageW (message.c:3264)
   by  TREEVIEW_SendTreeviewNotify (treeview.c:502)
   by  TREEVIEW_SendExpanding (treeview.c:3213)
   by  TREEVIEW_Expand (treeview.c:3374)
   by  TREEVIEW_WindowProc (treeview.c:3549)
   by  ??? (in dlls/user32/user32.dll.so)
   by  call_window_proc (winproc.c:242)
   by  WINPROC_call_window (winproc.c:899)
   by  call_window_proc (message.c:2211)
   by  send_message (message.c:3084)
   by  SendMessageW (message.c:3264)
   by  BrsFolderDlgProc (brsfolder.c:275)
   by  ??? (in dlls/user32/user32.dll.so)
   by  call_dialog_proc (winproc.c:263)
   by  WINPROC_CallDlgProcW (winproc.c:1045)
   by  DefDlgProcW (defdlg.c:425)
   by  ??? (in dlls/user32/user32.dll.so)
   by  call_window_proc (winproc.c:242)
   by  WINPROC_call_window (winproc.c:899)
   by  call_window_proc (message.c:2211)
   by  send_message (message.c:3084)
   by  SendMessageW (message.c:3264)
   by  DIALOG_CreateIndirect (dialog.c:694)
   by  DialogBoxParamW (dialog.c:870)
   by  SHBrowseForFolderW (brsfolder.c:1129)
   by  SHBrowseForFolderA (brsfolder.c:1092)
   by  test_selection (brsfolder.c:344)
   by  func_brsfolder (brsfolder.c:364)
   by  run_test (test.h:556)
   by  main (test.h:624)
 Address 0x7f012958 is 0 bytes inside a block of size 14 free'd
   at  notify_free (heap.c:262)
   by  RtlFreeHeap (heap.c:1748)
   by  WineEngInit (freetype.c:1349)
   by  DllMain (gdiobj.c:582)

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.