Skip to content

W
wine-winehq
Commit 38882460 authored by Ulrich Weigand's avatar Ulrich Weigand Committed by Alexandre Julliard
Browse files
Options

Bugfix: Local32Free caused free handles list corruption.

parent 48ed3e11
Hide whitespace changes
Inline Side-by-side
Showing with 3 additions and 3 deletions
memory/heap.c
View file @ 38882460
...@@ -1672,7 +1672,7 @@ DWORD WINAPI Local32Alloc( HANDLE32 heap, DWORD size, INT16 type, DWORD flags ) ...@@ -1672,7 +1672,7 @@ DWORD WINAPI Local32Alloc( HANDLE32 heap, DWORD size, INT16 type, DWORD flags )
for (i = 0; i < HTABLE_PAGESIZE; i += 4) for (i = 0; i < HTABLE_PAGESIZE; i += 4)
*(DWORD *)((LPBYTE)header + i) = i+4; *(DWORD *)((LPBYTE)header + i) = i+4;
if (page < 31) if (page < HTABLE_NPAGES-1)
header->freeListFirst[page+1] = 0xffff; header->freeListFirst[page+1] = 0xffff;
} }
...@@ -1756,7 +1756,7 @@ BOOL32 WINAPI Local32Free( HANDLE32 heap, DWORD addr, INT16 type ) ...@@ -1756,7 +1756,7 @@ BOOL32 WINAPI Local32Free( HANDLE32 heap, DWORD addr, INT16 type )
header->freeListFirst[page] = header->freeListLast[page] = offset; header->freeListFirst[page] = header->freeListLast[page] = offset;
else else
*(LPDWORD)((LPBYTE)header + header->freeListLast[page]) = offset, *(LPDWORD)((LPBYTE)header + header->freeListLast[page]) = offset,
header->freeListLast[page] = *handle; header->freeListLast[page] = offset;
*handle = 0; *handle = 0;
...@@ -1769,7 +1769,7 @@ BOOL32 WINAPI Local32Free( HANDLE32 heap, DWORD addr, INT16 type ) ...@@ -1769,7 +1769,7 @@ BOOL32 WINAPI Local32Free( HANDLE32 heap, DWORD addr, INT16 type )
break; break;
header->limit -= HTABLE_PAGESIZE; header->limit -= HTABLE_PAGESIZE;
header->freeListFirst[page] = -1; header->freeListFirst[page] = 0xffff;
page--; page--;
} }
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment