Author: gschneider Date: Mon Aug 17 02:13:44 2009 New Revision: 42748
URL: http://svn.reactos.org/svn/reactos?rev=42748&view=rev Log: Handle a missing output buffer in NtGdiGetCharABCWidthsW
Modified: trunk/reactos/subsystems/win32/win32k/objects/freetype.c
Modified: trunk/reactos/subsystems/win32/win32k/objects/freetype.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/obj... ============================================================================== --- trunk/reactos/subsystems/win32/win32k/objects/freetype.c [iso-8859-1] (original) +++ trunk/reactos/subsystems/win32/win32k/objects/freetype.c [iso-8859-1] Mon Aug 17 02:13:44 2009 @@ -3761,6 +3761,12 @@ return FALSE; }
+ if (!Buffer) + { + SetLastWin32Error(ERROR_INVALID_PARAMETER); + return FALSE; + } + BufferSize = Count * sizeof(ABC); // Same size! SafeBuff = ExAllocatePoolWithTag(PagedPool, BufferSize, TAG_GDITEXT); if (!fl) SafeBuffF = (LPABCFLOAT) SafeBuff;