[Fwd: Possible scanner bug]

[Dmitry Timoshkov]

"Mike Hearn" <mike at plan99.net> wrote:

> Awesome, thanks Matthew. Full credit to James Hawkins who figured out 
> what was tripped up the scanner anyway, I just forwarded the info on.
> 
> So there we go guys! We are down 220 bugs overnight :)
> 
> Matthew Hayward wrote:
>> Hello Mike,
>>    Thanks for pointing out the WideCharToMultiByte function.   I 
>> have provided back end configuration indicating it is not an error to 
>> send in parameter #4 as negative, and that eliminated around 220 
>> reports.  We try to have a low false positive rate, but sometimes when 
>> we misunderstand an interface like that we will see a bug report at each 
>> invocation of the interface, fortunately most of the time, as in this 
>> case, we can configure around it easily.
>>    Thanks again for pointing this out to us!

The same kind of error is reported for mlang.dll, but the situation is worse
there since the length parameter is unsigned but still accepts -1 as a magic
length indicator.

-- 
Dmitry.