[0.4.9][WIN32K:NTUSER] Reference menus owned by a popup menu. CORE-15504

Fixes a BSOD mentioned in CORE-15504

cherry picked from commit 0.4.12-dev-218-g
e3c8002dfc
This commit is contained in:
Thomas Faber 2018-12-28 13:39:23 +01:00 committed by Joachim Henze
parent ca8fbad361
commit 65c7d4a17b

View file

@ -4475,6 +4475,10 @@ PopupMenuWndProc(
{
CREATESTRUCTW *cs = (CREATESTRUCTW *) lParam;
pPopupMenu->spmenu = UserGetMenuObject(cs->lpCreateParams);
if (pPopupMenu->spmenu)
{
UserReferenceObject(pPopupMenu->spmenu);
}
break;
}
@ -4519,6 +4523,10 @@ PopupMenuWndProc(
case WM_NCDESTROY:
{
if (pPopupMenu->spmenu)
{
IntReleaseMenuObject(pPopupMenu->spmenu);
}
DesktopHeapFree(Wnd->head.rpdesk, pPopupMenu );
((PMENUWND)Wnd)->ppopupmenu = 0;
Wnd->fnid = FNID_DESTROY;
@ -4534,6 +4542,11 @@ PopupMenuWndProc(
ERR("Bad Menu Handle\n");
break;
}
UserReferenceObject(pmenu);
if (pPopupMenu->spmenu)
{
IntReleaseMenuObject(pPopupMenu->spmenu);
}
pPopupMenu->spmenu = pmenu;
break;
}