mirror of
https://github.com/reactos/reactos.git
synced 2024-09-28 13:34:53 +00:00
[WINESYNC] msi: Fix use after free error in TransformView_set_row.
Signed-off-by: Piotr Caban <piotr@codeweavers.com> Signed-off-by: Hans Leidekker <hans@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org> wine commit id 6a0a0d2a0b15bffa9d4a5b41e75be6765e731d69 by Piotr Caban <piotr@codeweavers.com>
This commit is contained in:
parent
61167e123f
commit
c6c4bdb242
|
@ -2341,7 +2341,7 @@ static UINT TransformView_set_row( MSIVIEW *view, UINT row, MSIRECORD *rec, UINT
|
|||
L"INSERT INTO `_TransformView` (`Table`, `Column`, `Row`, `Data`, `Current`) VALUES ('";
|
||||
|
||||
MSITABLEVIEW *tv = (MSITABLEVIEW*)view;
|
||||
WCHAR buf[256], *query = buf;
|
||||
WCHAR buf[256], *query;
|
||||
MSIRECORD *old_rec;
|
||||
MSIQUERY *q;
|
||||
WCHAR *key;
|
||||
|
@ -2409,6 +2409,10 @@ static UINT TransformView_set_row( MSIVIEW *view, UINT row, MSIRECORD *rec, UINT
|
|||
return ERROR_OUTOFMEMORY;
|
||||
}
|
||||
}
|
||||
else
|
||||
{
|
||||
query = buf;
|
||||
}
|
||||
|
||||
memcpy( query, query_pfx, p * sizeof(WCHAR) );
|
||||
len = wcslen( tv->name );
|
||||
|
|
Loading…
Reference in a new issue