usp10: Fix invalid read.

f1334dbb · Thomas Faller · Alexandre Julliard · 80c3fca0 · f1334dbb
Commit f1334dbb authored Sep 03, 2015 by Thomas Faller Committed by Alexandre Julliard Sep 03, 2015
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

usp10.c dlls/usp10/usp10.c +2 -1

No files found.
--- a/dlls/usp10/usp10.c
+++ b/dlls/usp10/usp10.c
@@ -1477,7 +1477,8 @@ static HRESULT _ItemizeInternal(const WCHAR *pwcInChars, int cInChars,
        }
    }

-    while ((!levels || (levels && levels[cnt+1] == levels[0])) && (pwcInChars[cnt] == Numeric_space) && cnt < cInChars)
+    while ((!levels || (levels && cnt+1 < cInChars && levels[cnt+1] == levels[0]))
+            && (cnt < cInChars && pwcInChars[cnt] == Numeric_space))
        cnt++;

    if (cnt == cInChars) /* All Spaces */