Author: tkreuzer
Date: Sat Apr 21 16:05:24 2012
New Revision: 56384
URL:
http://svn.reactos.org/svn/reactos?rev=56384&view=rev
Log:
[WIN32K]
In NtGdiGetTextExtentExW fail when Count is negative.
Modified:
trunk/reactos/win32ss/gdi/ntgdi/text.c
Modified: trunk/reactos/win32ss/gdi/ntgdi/text.c
URL:
http://svn.reactos.org/svn/reactos/trunk/reactos/win32ss/gdi/ntgdi/text.c?r…
==============================================================================
--- trunk/reactos/win32ss/gdi/ntgdi/text.c [iso-8859-1] (original)
+++ trunk/reactos/win32ss/gdi/ntgdi/text.c [iso-8859-1] Sat Apr 21 16:05:24 2012
@@ -278,6 +278,12 @@
LPINT Dx;
PTEXTOBJ TextObj;
+ if ((LONG)Count < 0)
+ {
+ EngSetLastError(ERROR_INVALID_PARAMETER);
+ return FALSE;
+ }
+
/* FIXME: Handle fl */
if (0 == Count)