From 0e5f29ba92452450529d1f143f72da7f5638cec8 Mon Sep 17 00:00:00 2001 From: Alexandre Julliard Date: Tue, 1 Aug 2006 17:52:48 +0200 Subject: [PATCH] gdi: Fixed buffer overflow in GetCharABCWidthsI. --- dlls/gdi/font.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dlls/gdi/font.c b/dlls/gdi/font.c index c444191520..16e7f7b5be 100644 --- a/dlls/gdi/font.c +++ b/dlls/gdi/font.c @@ -2385,7 +2385,7 @@ BOOL WINAPI GetCharABCWidthsI( HDC hdc, UINT firstChar, UINT count, if (ret) { /* convert device units to logical */ - for( i = firstChar; i <= count; i++, abc++ ) { + for( i = 0; i < count; i++, abc++ ) { abc->abcA = INTERNAL_XDSTOWS(dc, abc->abcA); abc->abcB = INTERNAL_XDSTOWS(dc, abc->abcB); abc->abcC = INTERNAL_XDSTOWS(dc, abc->abcC);