ole32: Fix length of buffer allocated by SNB_UserUnmarshal() (Valgrind).

bfa23b63 · Nikolay Sivov · Alexandre Julliard · 17a50f39 · bfa23b63
Commit bfa23b63 authored Jun 04, 2015 by Nikolay Sivov Committed by Alexandre Julliard Jun 04, 2015
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

usrmarshal.c dlls/ole32/usrmarshal.c +1 -1

No files found.
--- a/dlls/ole32/usrmarshal.c
+++ b/dlls/ole32/usrmarshal.c
@@ -2247,7 +2247,7 @@ unsigned char * __RPC_USER SNB_UserUnmarshal(ULONG *pFlags, unsigned char *pBuff
        WCHAR **ptrW;
        ULONG i;

-        ptrW = *pSnb = umcb->pStubMsg->pfnAllocate((wire->strcnt+1)*sizeof(WCHAR*) + wire->datalen);
+        ptrW = *pSnb = umcb->pStubMsg->pfnAllocate((wire->strcnt+1)*sizeof(WCHAR*) + wire->datalen*sizeof(WCHAR));
        dest = (WCHAR*)(*pSnb + wire->strcnt + 1);

        for (i = 0; i < wire->strcnt; i++)