Commit b203b761 authored by Nikolay Sivov's avatar Nikolay Sivov Committed by Alexandre Julliard

gdiplus/metafile: Validate data size when playing back EmfPlusClear.

parent 9787af34
...@@ -1823,6 +1823,9 @@ GpStatus WINGDIPAPI GdipPlayMetafileRecord(GDIPCONST GpMetafile *metafile, ...@@ -1823,6 +1823,9 @@ GpStatus WINGDIPAPI GdipPlayMetafileRecord(GDIPCONST GpMetafile *metafile,
{ {
EmfPlusClear *record = (EmfPlusClear*)header; EmfPlusClear *record = (EmfPlusClear*)header;
if (dataSize != sizeof(record->Color))
return InvalidParameter;
return GdipGraphicsClear(metafile->playback_graphics, record->Color); return GdipGraphicsClear(metafile->playback_graphics, record->Color);
} }
case EmfPlusRecordTypeFillRects: case EmfPlusRecordTypeFillRects:
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment