gdiplus: Fix a string buffer overflow.

a2d04673 · Alexandre Julliard · b562a512 · a2d04673
Commit a2d04673 authored Sep 25, 2008 by Alexandre Julliard
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

graphics.c dlls/gdiplus/graphics.c +1 -1

No files found.
--- a/dlls/gdiplus/graphics.c
+++ b/dlls/gdiplus/graphics.c
@@ -2625,7 +2625,7 @@ GpStatus WINGDIPAPI GdipMeasureString(GpGraphics *graphics,

    if(length == -1) length = lstrlenW(string);

-    stringdup = GdipAlloc(length * sizeof(WCHAR));
+    stringdup = GdipAlloc((length + 1) * sizeof(WCHAR));
    if(!stringdup) return OutOfMemory;

    oldfont = SelectObject(graphics->hdc, CreateFontIndirectW(&font->lfw));