[PATCH] comctl32: Fix integer overflow in DPA_Search.
Jinoh Kang
jinoh.kang.kr at gmail.com
Sat Mar 12 05:57:13 CST 2022
Signed-off-by: Jinoh Kang <jinoh.kang.kr at gmail.com>
---
dlls/comctl32/dpa.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/dlls/comctl32/dpa.c b/dlls/comctl32/dpa.c
index b8d23f6cafa..aa9a045e516 100644
--- a/dlls/comctl32/dpa.c
+++ b/dlls/comctl32/dpa.c
@@ -859,7 +859,7 @@ INT WINAPI DPA_Search (HDPA hdpa, LPVOID pFind, INT nStart,
r = hdpa->nItemCount - 1;
lpPtr = hdpa->ptrs;
while (r >= l) {
- x = (l + r) / 2;
+ x = l + (r - l) / 2;
n = (pfnCompare)(pFind, lpPtr[x], lParam);
if (n == 0)
return x;
--
2.34.1
More information about the wine-devel
mailing list