user: Fixed the lifetime of MDICREATESTRUCT variables.

dlls/user/win.c

@@ -833,6 +833,7 @@ static HWND WIN_CreateWindowEx( CREATESTRUCTA *cs, ATOM classAtom,
     WND *wndPtr;
     HWND hwnd, parent, owner, top_child = 0;
     BOOL unicode = (type == WIN_PROC_32W);
+    MDICREATESTRUCTA mdi_cs;
 
     TRACE("%s %s ex=%08lx style=%08lx %d,%d %dx%d parent=%p menu=%p inst=%p params=%p\n",
           (type == WIN_PROC_32W) ? debugstr_w((LPCWSTR)cs->lpszName) : debugstr_a(cs->lpszName),
@@ -848,7 +849,6 @@ static HWND WIN_CreateWindowEx( CREATESTRUCTA *cs, ATOM classAtom,
     /* Fix the styles for MDI children */
     if (cs->dwExStyle & WS_EX_MDICHILD)
     {
-        MDICREATESTRUCTA mdi_cs;
         UINT flags = 0;
 
         wndPtr = WIN_GetPtr(cs->hwndParent);

dlls/user/winproc.c

@@ -3017,6 +3017,7 @@ static BOOL WINPROC_CallProc32WTo32A_fast( WNDPROC func, HWND hwnd,
             char *cls = buffer, *name;
             CREATESTRUCTW *csW = (CREATESTRUCTW *)lParam;
             CREATESTRUCTA csA = *(CREATESTRUCTA *)csW;
+            MDICREATESTRUCTA mdi_cs;
             DWORD name_lenA, name_lenW, class_lenA, class_lenW;
 
             class_lenW = strlenW(csW->lpszClass) * sizeof(WCHAR);
@@ -3050,8 +3051,6 @@ static BOOL WINPROC_CallProc32WTo32A_fast( WNDPROC func, HWND hwnd,
 
             if (GetWindowLongW(hwnd, GWL_EXSTYLE) & WS_EX_MDICHILD)
             {
-                MDICREATESTRUCTA mdi_cs;
-
                 mdi_cs = *(MDICREATESTRUCTA *)csW->lpCreateParams;
                 mdi_cs.szTitle = csA.lpszName;
                 mdi_cs.szClass = csA.lpszClass;