Buffer overrun in dlls/riched20/editor.c

2008-09-11 Thread Juan Lang
Hi Dylan, commit 11c80396995065701205f2facb3dba10a6f8170f[1] introduced a buffer overrun in riched20's editor.c. Here's the hunk that did it: @@ -666,35 +661,83 @@ static void ME_RTFParAttrHook(RTF_Info *info) static void ME_RTFTblAttrHook(RTF_Info *info) { - ME_DisplayItem *para; -

Buffer overrun in dlls/riched20/editor.c

2008-09-11 Thread Juan Lang
Hi Dylan, commit 11c80396995065701205f2facb3dba10a6f8170f[1] introduced a buffer overrun in riched20's editor.c. Here's the hunk that did it: @@ -666,35 +661,83 @@ static void ME_RTFParAttrHook(RTF_Info *info) static void ME_RTFTblAttrHook(RTF_Info *info) { - ME_DisplayItem *para; -

Re: Buffer overrun in dlls/riched20/editor.c

2008-09-11 Thread Dylan Smith
On Thu, Sep 11, 2008 at 4:30 PM, Juan Lang [EMAIL PROTECTED] wrote: Hi Dylan, commit 11c80396995065701205f2facb3dba10a6f8170f[1] introduced a buffer overrun in riched20's editor.c. Thanks for pointing out the problem. I sent a patch to wine-patches that fixes the problem.