[WIN32K:NTUSER]

- In UserAttachThreadInput, copy the CaretInfo structure instead of saving a pointer that may be freed right after
CORE-10395 #resolve

svn path=/trunk/; revision=69677
This commit is contained in:
Thomas Faber 2015-10-24 15:04:12 +00:00
parent 2af7ac46cc
commit 929dbdcd82

View file

@ -524,7 +524,9 @@ UserAttachThreadInput(PTHREADINFO ptiFrom, PTHREADINFO ptiTo, BOOL fAttach)
ptiTo->MessageQueue->spwndFocus = ptiFrom->MessageQueue->spwndFocus;
ptiTo->MessageQueue->spwndCapture = ptiFrom->MessageQueue->spwndCapture;
ptiTo->MessageQueue->QF_flags ^= ((ptiTo->MessageQueue->QF_flags ^ ptiFrom->MessageQueue->QF_flags) & QF_CAPTURELOCKED);
ptiTo->MessageQueue->CaretInfo = ptiFrom->MessageQueue->CaretInfo;
RtlCopyMemory(ptiTo->MessageQueue->CaretInfo,
ptiFrom->MessageQueue->CaretInfo,
sizeof(ptiTo->MessageQueue->CaretInfo));
IntSetFocusMessageQueue(NULL);
IntSetFocusMessageQueue(ptiTo->MessageQueue);
gptiForeground = ptiTo;