Author: tkreuzer Date: Sat Apr 21 16:05:24 2012 New Revision: 56384
URL: http://svn.reactos.org/svn/reactos?rev=56384&view=rev Log: [WIN32K] In NtGdiGetTextExtentExW fail when Count is negative.
Modified: trunk/reactos/win32ss/gdi/ntgdi/text.c
Modified: trunk/reactos/win32ss/gdi/ntgdi/text.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/win32ss/gdi/ntgdi/text.c?re... ============================================================================== --- trunk/reactos/win32ss/gdi/ntgdi/text.c [iso-8859-1] (original) +++ trunk/reactos/win32ss/gdi/ntgdi/text.c [iso-8859-1] Sat Apr 21 16:05:24 2012 @@ -278,6 +278,12 @@ LPINT Dx; PTEXTOBJ TextObj;
+ if ((LONG)Count < 0) + { + EngSetLastError(ERROR_INVALID_PARAMETER); + return FALSE; + } + /* FIXME: Handle fl */
if (0 == Count)