[WIN32K:NTUSER]

- Include the CLIPBOARDDATA structure itself when calculating the size passed to UserCreateObject in IntSynthesizeDib. Fixes user heap corruption when running user32_winetest:clipboard. CORE-13408 svn path=/trunk/; revision=74990
2024-07-04 19:54:58 +00:00 · 2017-06-11 06:05:42 +00:00 · 2017-06-11 06:05:42 +00:00 · ea1f78da72
parent f45315d051
commit ea1f78da72
1 changed files with 1 additions and 1 deletions
--- a/reactos/win32ss/user/ntuser/clipboard.c
+++ b/reactos/win32ss/user/ntuser/clipboard.c
@ -180,7 +180,7 @@ IntSynthesizeDib(
                                                      NULL,
                                                      &hMem,
                                                      TYPE_CLIPDATA,
-                                                      cjDataSize);
+                                                      sizeof(CLIPBOARDDATA) + cjDataSize);
    if (!pClipboardData)
    {
        goto cleanup;