• Dmitry Timoshkov's avatar
    uxtheme: Protect CloseThemeData() from invalid input. · 2ae7ecb9
    Dmitry Timoshkov authored
    With test case by Michael Müller <michael@fds-team.de>.
    
    Zhiyi Zhang's comments:
    
    Some applications close the same HTHEME handle more than once, causing use-after-free. HTHEME is a
    handle rather than a pointer. Some testing shows that it's a handle starting from 0x10000 or 0x20000.
    Each new handle increments from the first handle and closing handles decrements it. I prefer not to
    implement this handle to data map for now because it will likely hurt performance.
    
    Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=29974
    2ae7ecb9
Name
Last commit
Last update
dlls Loading commit data...
documentation Loading commit data...
fonts Loading commit data...
include Loading commit data...
libs Loading commit data...
loader Loading commit data...
nls Loading commit data...
po Loading commit data...
programs Loading commit data...
server Loading commit data...
tools Loading commit data...
.editorconfig Loading commit data...
.gitlab-ci.yml Loading commit data...
.mailmap Loading commit data...
ANNOUNCE Loading commit data...
AUTHORS Loading commit data...
COPYING.LIB Loading commit data...
LICENSE Loading commit data...
LICENSE.OLD Loading commit data...
MAINTAINERS Loading commit data...
README Loading commit data...
VERSION Loading commit data...
aclocal.m4 Loading commit data...
configure Loading commit data...
configure.ac Loading commit data...