[PATCH] user32/menu: Inside HiliteMenuItem free menu earlier to avoid crash

[Dmitry Timoshkov]

Fabian Maurer <dark.shadow4 at web.de> wrote:

>      if (!(menu = find_menu_item(hMenu, wItemID, wHilite, &pos))) return FALSE;
>  
> +    handle_menu = menu->obj.handle;
> +    release_menu_ptr(menu);
> +
>      if (menu->FocusedItem != pos)
>      {

Now you are accessing the menu contents after the release_menu_ptr().

-- 
Dmitry.