From: Thomas Faller Subject: [PATCH] vbscript: fix for unchecked memory access Message-Id: <5560B198.7030102@gmx.de> Date: Sat, 23 May 2015 18:58:00 +0200 Fix for https://bugs.winehq.org/show_bug.cgi?id=38453 --- dlls/vbscript/global.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dlls/vbscript/global.c b/dlls/vbscript/global.c index 1a20527..129d6ce 100644 --- a/dlls/vbscript/global.c +++ b/dlls/vbscript/global.c @@ -1827,7 +1827,7 @@ static HRESULT Global_InStrRev(vbdisp_t *This, VARIANT *args, unsigned args_cnt, assert(2 <= args_cnt && args_cnt <= 4); - if(V_VT(args) == VT_NULL || V_VT(args+1) == VT_NULL || V_VT(args+2) == VT_NULL) + if(V_VT(args) == VT_NULL || V_VT(args+1) == VT_NULL || (args_cnt > 2 && V_VT(args+2) == VT_NULL)) return MAKE_VBSERROR(VBSE_ILLEGAL_NULL_USE); hres = to_string(args, &str1);