Author: jimtabor Date: Sat Dec 28 06:52:28 2013 New Revision: 61458
URL: http://svn.reactos.org/svn/reactos?rev=61458&view=rev Log: - Fix TC edit control NULL pointer. See CORE-7695.
Modified: trunk/reactos/win32ss/user/ntuser/message.c
Modified: trunk/reactos/win32ss/user/ntuser/message.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/win32ss/user/ntuser/message... ============================================================================== --- trunk/reactos/win32ss/user/ntuser/message.c [iso-8859-1] (original) +++ trunk/reactos/win32ss/user/ntuser/message.c [iso-8859-1] Sat Dec 28 06:52:28 2013 @@ -1328,6 +1328,8 @@ else { lParamBufferSize = MsgMemorySize(MsgMemoryEntry, wParam, lParam); + // If zero, do not allow callback on client side to allocate a buffer!!!!! See CORE-7695. + if (!lParamBufferSize) lParamBufferSize = -1; }
if (! NT_SUCCESS(PackParam(&lParamPacked, Msg, wParam, lParam, FALSE))) @@ -1569,6 +1571,7 @@ else { lParamBufferSize = MsgMemorySize(MsgMemoryEntry, wParam, lParam); + if (!lParamBufferSize) lParamBufferSize = -1; }
if (! NT_SUCCESS(PackParam(&lParamPacked, Msg, wParam, lParam, !!ptiSendTo)))