vbscript: Fix a memory allocation size to avoid overflows.

9fe25eae · Alexandre Julliard · a7df4958 · 9fe25eae
Commit 9fe25eae authored Sep 16, 2011 by Alexandre Julliard
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

vbdisp.c dlls/vbscript/vbdisp.c +1 -1

No files found.
--- a/dlls/vbscript/vbdisp.c
+++ b/dlls/vbscript/vbdisp.c
@@ -398,7 +398,7 @@ HRESULT create_vbdisp(const class_desc_t *desc, vbdisp_t **ret)
 {
    vbdisp_t *vbdisp;

-    vbdisp = heap_alloc_zero(sizeof(*vbdisp) + (desc->prop_cnt-1)*sizeof(VARIANT));
+    vbdisp = heap_alloc_zero( FIELD_OFFSET( vbdisp_t, props[desc->prop_cnt] ));
    if(!vbdisp)
        return E_OUTOFMEMORY;