fixed fatal buffer overwrite in wxMBConvUTF16swap::MB2WC()
git-svn-id: https://svn.wxwidgets.org/svn/wx/wxWidgets/trunk@38487 c3d73ce0-8a6f-49c7-b76d-6d57e0e08775
This commit is contained in:
@@ -864,7 +864,7 @@ size_t wxMBConvUTF16swap::MB2WC(wchar_t *buf, const char *psz, size_t n) const
|
|||||||
{
|
{
|
||||||
size_t len = 0;
|
size_t len = 0;
|
||||||
|
|
||||||
while (*(wxUint16*)psz && (!buf || len < n))
|
while ( *psz && (!buf || len < n) )
|
||||||
{
|
{
|
||||||
if ( buf )
|
if ( buf )
|
||||||
{
|
{
|
||||||
@@ -873,9 +873,11 @@ size_t wxMBConvUTF16swap::MB2WC(wchar_t *buf, const char *psz, size_t n) const
|
|||||||
buf++;
|
buf++;
|
||||||
}
|
}
|
||||||
len++;
|
len++;
|
||||||
psz += sizeof(wxUint16);
|
psz += 2;
|
||||||
}
|
}
|
||||||
if (buf && len<n) *buf=0;
|
|
||||||
|
if ( buf && len < n )
|
||||||
|
*buf = L'\0';
|
||||||
|
|
||||||
return len;
|
return len;
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user