kernel32: GetTempPathW must zero the remaining buffer.

dlls/kernel32/path.c

@@ -623,9 +623,13 @@ DWORD WINAPI GetTempPathW( DWORD count, LPWSTR path )
 
     if (count)
     {
-        lstrcpynW(path, tmp_path, count);
+        lstrcpynW(path, tmp_path, ret);
         if (count >= ret)
+        {
+            /* the remaining buffer must be zeroed */
+            memset(path + ret, 0, (count - ret) * sizeof(WCHAR));
             ret--; /* return length without 0 */
+        }
         else if (count < 4)
             path[0] = 0; /* avoid returning ambiguous "X:" */
     }

dlls/kernel32/tests/path.c

@@ -1012,7 +1012,6 @@ static void test_GetTempPathW(char* tmp_dir)
     ok(len == lstrlenW(buf), "returned length should be equal to the length of string\n");
     /* The rest of the buffer must be zeroed */
     for(len++; len < sizeof(buf) / sizeof(buf[0]); len++)
-        todo_wine
         ok(buf[len] == '\0', "expected NULL at [%d], got 0x%x\n", len, buf[len]);
 }