Fix a heap corruption when printing specific REG_MULTI_SZ values.

Hugh McMaster hugh.mcmaster at outlook.com
Sat Apr 23 04:56:40 CDT 2016


On Saturday, 23 April 2016 3:35 AM, Sebastian Lackner wrote:

>The current calculation does not take the terminating \0 into account.

> -buffer = HeapAlloc(GetProcessHeap(), 0, tmp_size * 2);
> +buffer = HeapAlloc(GetProcessHeap(), 0, tmp_size * 2 + sizeof(WCHAR));

Which particular cases cause the heap corruption?

--
Hugh McMaster


More information about the wine-devel mailing list