[cwittich] 39397: mshtml: fixed second buffer argument to MultiByteToWideChar Marcus Meissner <marcus at jet.franken.de> http://www.winehq.org/pipermail/wine-patches/2009-February/068903.html

Author: cwittich
Date: Thu Feb  5 00:54:33 2009
New Revision: 39397

URL: http://svn.reactos.org/svn/reactos?rev=39397&view=rev
Log:
mshtml: fixed second buffer argument to MultiByteToWideChar
Marcus Meissner <marcus at jet.franken.de>

http://www.winehq.org/pipermail/wine-patches/2009-February/068903.html

Modified:
    trunk/reactos/dll/win32/mshtml/editor.c
    trunk/reactos/dll/win32/mshtml/navigate.c

Modified: trunk/reactos/dll/win32/mshtml/editor.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/dll/win32/mshtml/editor.c?r...
==============================================================================
--- trunk/reactos/dll/win32/mshtml/editor.c [iso-8859-1] (original)
+++ trunk/reactos/dll/win32/mshtml/editor.c [iso-8859-1] Thu Feb  5 00:54:33 2009
@@ -588,7 +588,7 @@

len = MultiByteToWideChar(CP_ACP, 0, stra, -1, NULL, 0);
         strw = heap_alloc(len*sizeof(WCHAR));
-        MultiByteToWideChar(CP_ACP, 0, stra, -1, strw, -1);
+        MultiByteToWideChar(CP_ACP, 0, stra, -1, strw, len);
         nsfree(stra);

V_BSTR(out) = SysAllocString(strw);

Modified: trunk/reactos/dll/win32/mshtml/navigate.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/dll/win32/mshtml/navigate.c...
==============================================================================
--- trunk/reactos/dll/win32/mshtml/navigate.c [iso-8859-1] (original)
+++ trunk/reactos/dll/win32/mshtml/navigate.c [iso-8859-1] Thu Feb  5 00:54:33 2009
@@ -657,7 +657,7 @@
         else
             headers = heap_alloc((len+1)*sizeof(WCHAR));

-        len = MultiByteToWideChar(CP_ACP, 0, ptr2, ptr-ptr2, headers+headers_len, -1);
+        len = MultiByteToWideChar(CP_ACP, 0, ptr2, ptr-ptr2, headers+headers_len, len);
         headers_len += len;

ptr2 = ptr;