Commit 0e5f29ba authored by Alexandre Julliard's avatar Alexandre Julliard

gdi: Fixed buffer overflow in GetCharABCWidthsI.

parent ded32d51
......@@ -2385,7 +2385,7 @@ BOOL WINAPI GetCharABCWidthsI( HDC hdc, UINT firstChar, UINT count,
if (ret)
{
/* convert device units to logical */
for( i = firstChar; i <= count; i++, abc++ ) {
for( i = 0; i < count; i++, abc++ ) {
abc->abcA = INTERNAL_XDSTOWS(dc, abc->abcA);
abc->abcB = INTERNAL_XDSTOWS(dc, abc->abcB);
abc->abcC = INTERNAL_XDSTOWS(dc, abc->abcC);
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment