GetMetaFile checks both the version and the header size when it tries

to load a metafile. Powerpoint XP depends on this.

GetMetaFile checks both the version and the header size when it tries
82977c14 · Huw Davies · Alexandre Julliard · e8cafa57 · 82977c14
Commit 82977c14 authored Jan 26, 2005 by Huw Davies Committed by Alexandre Julliard Jan 26, 2005
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

metafile.c dlls/gdi/metafile.c +4 -0

No files found.
--- a/dlls/gdi/metafile.c
+++ b/dlls/gdi/metafile.c
@@ -245,6 +245,10 @@ static METAHEADER *MF_ReadMetaFile(HANDLE hfile)
        HeapFree( GetProcessHeap(), 0, mh );
 	return NULL;
    }
+    if(mh->mtVersion != MFVERSION || mh->mtHeaderSize != size / 2) {
+        HeapFree( GetProcessHeap(), 0, mh );
+        return NULL;
+    }
    size = mh->mtSize * 2;
    mh = HeapReAlloc( GetProcessHeap(), 0, mh, size );
    if(!mh) return NULL;