fixed fatal buffer overwrite in wxMBConvUTF16swap::MB2WC()
git-svn-id: https://svn.wxwidgets.org/svn/wx/wxWidgets/trunk@38487 c3d73ce0-8a6f-49c7-b76d-6d57e0e08775
This commit is contained in:
@@ -864,7 +864,7 @@ size_t wxMBConvUTF16swap::MB2WC(wchar_t *buf, const char *psz, size_t n) const
|
||||
{
|
||||
size_t len = 0;
|
||||
|
||||
while (*(wxUint16*)psz && (!buf || len < n))
|
||||
while ( *psz && (!buf || len < n) )
|
||||
{
|
||||
if ( buf )
|
||||
{
|
||||
@@ -873,9 +873,11 @@ size_t wxMBConvUTF16swap::MB2WC(wchar_t *buf, const char *psz, size_t n) const
|
||||
buf++;
|
||||
}
|
||||
len++;
|
||||
psz += sizeof(wxUint16);
|
||||
psz += 2;
|
||||
}
|
||||
if (buf && len<n) *buf=0;
|
||||
|
||||
if ( buf && len < n )
|
||||
*buf = L'\0';
|
||||
|
||||
return len;
|
||||
}
|
||||
|
Reference in New Issue
Block a user