From: Nikolay Sivov Subject: [3/3] xmllite: Correct allocated destination buffer size Message-Id: <52517CE7.7050606@codeweavers.com> Date: Sun, 06 Oct 2013 19:08:23 +0400 Correct allocated destination buffer size From 3c1167a3b390377ce60acee6289e4e633dd01c3d Mon Sep 17 00:00:00 2001 From: Nikolay Sivov Date: Sun, 6 Oct 2013 18:59:29 +0400 Subject: [PATCH 7/7] Correct allocated destination buffer size --- dlls/xmllite/reader.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/dlls/xmllite/reader.c b/dlls/xmllite/reader.c index 4209763..68cbe46 100644 --- a/dlls/xmllite/reader.c +++ b/dlls/xmllite/reader.c @@ -711,11 +711,12 @@ static HRESULT readerinput_growraw(xmlreaderinput *readerinput) return hr; } -/* grows UTF-16 buffer so it has at least 'length' bytes free on return */ +/* grows UTF-16 buffer so it has at least 'length' WCHAR chars free on return */ static void readerinput_grow(xmlreaderinput *readerinput, int length) { encoded_buffer *buffer = &readerinput->buffer->utf16; + length *= sizeof(WCHAR); /* grow if needed, plus 4 bytes to be sure null terminator will fit in */ if (buffer->allocated < buffer->written + length + 4) { -- 1.7.10.4