dwrite: Avoid memcpy source overflow in GetFontAxisValues.

0908161b · Rémi Bernon · Alexandre Julliard · 5f981c37 · 0908161b
Commit 0908161b authored Nov 17, 2022 by Rémi Bernon Committed by Alexandre Julliard Nov 21, 2022
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

font.c dlls/dwrite/font.c +1 -1

No files found.
--- a/dlls/dwrite/font.c
+++ b/dlls/dwrite/font.c
@@ -7039,7 +7039,7 @@ static HRESULT WINAPI fontfacereference1_GetFontAxisValues(IDWriteFontFaceRefere
    if (value_count < reference->axis_values_count)
        return E_NOT_SUFFICIENT_BUFFER;

-    memcpy(axis_values, reference->axis_values, value_count * sizeof(*axis_values));
+    memcpy(axis_values, reference->axis_values, reference->axis_values_count * sizeof(*axis_values));

    return S_OK;
 }