diff options
author | Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> | 2015-07-01 12:34:46 +0200 |
---|---|---|
committer | Christian Lohmaier <lohmaier+LibreOffice@googlemail.com> | 2015-07-01 12:34:46 +0200 |
commit | 2279f1f0227fc232356a7f5afc60eead77914b89 (patch) | |
tree | e8436e3918c625f3416ed67ea9c954c8a54b2797 | |
parent | cfaf0a580920727002510c996b5a83beb2e2a308 (diff) |
tdf#92269 fix Windows Explorer crash caused by shellextension
wcscpy_s is buffer size, not string length, so size must also account
for a terminating NULL
Change-Id: Ie69692e47c142f3b733b093d0b87fa4bb03db7b4
-rw-r--r-- | shell/source/win32/shlxthandler/infotips/infotips.cxx | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/shell/source/win32/shlxthandler/infotips/infotips.cxx b/shell/source/win32/shlxthandler/infotips/infotips.cxx index 4d20b39ec27a..70d253af3b28 100644 --- a/shell/source/win32/shlxthandler/infotips/infotips.cxx +++ b/shell/source/win32/shlxthandler/infotips/infotips.cxx @@ -289,7 +289,7 @@ HRESULT STDMETHODCALLTYPE CInfoTip::GetInfoTip(DWORD /*dwFlags*/, wchar_t** ppws ZeroMemory(pMem, len); - wcscpy_s(pMem, msg.length(), msg.c_str()); + wcscpy_s(pMem, msg.length()+1, msg.c_str()); *ppwszTip = pMem; lpMalloc->Release(); |