Kaydet (Commit) 77825cac authored tarafından Christian Lohmaier's avatar Christian Lohmaier Kaydeden (comit) Andras Timar

tdf#92269 fix Windows Explorer crash caused by shellextension

wcscpy_s is buffer size, not string length, so size must also account
for a terminating NULL

Change-Id: Ie69692e47c142f3b733b093d0b87fa4bb03db7b4
(cherry picked from commit 2279f1f0)
Reviewed-on: https://gerrit.libreoffice.org/16653Reviewed-by: 's avatarMichael Stahl <mstahl@redhat.com>
Tested-by: 's avatarMichael Stahl <mstahl@redhat.com>
üst 7ec83deb
......@@ -289,7 +289,7 @@ HRESULT STDMETHODCALLTYPE CInfoTip::GetInfoTip(DWORD /*dwFlags*/, wchar_t** ppws
ZeroMemory(pMem, len);
wcscpy_s(pMem, msg.length(), msg.c_str());
wcscpy_s(pMem, msg.length()+1, msg.c_str());
*ppwszTip = pMem;
lpMalloc->Release();
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment