usp10: Avoid buffer overrun in ReplaceInsertChars.

Signed-off-by: Thomas Faber <thomas.faber@reactos.org> Signed-off-by: Aric Stewart <aric@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

usp10: Avoid buffer overrun in ReplaceInsertChars.
37845242 · Thomas Faber · Alexandre Julliard · 64732cca · 37845242
Commit 37845242 authored Jun 26, 2016 by Thomas Faber Committed by Alexandre Julliard Jul 06, 2016
Show whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

shape.c dlls/usp10/shape.c +1 -1

No files found.
--- a/dlls/usp10/shape.c
+++ b/dlls/usp10/shape.c
@@ -1596,7 +1596,7 @@ static void ReplaceInsertChars(HDC hdc, INT cWalk, INT* pcChars, WCHAR *pwOutCha
    cWalk=cWalk+1;

    /* Insert */
-    for (i = 1; replacements[i] != 0x0000 && i < 3; i++)
+    for (i = 1; i < 3 && replacements[i] != 0x0000; i++)
    {
        int j;
        for (j = *pcChars; j > cWalk; j--)