Hi,

Sander van Leeuwen wrote:
Felipe,

Does this patch help? (controls\edit.c)

@@ -1747,7 +1747,7 @@
alloc_size = ROUND_TO_GROW((size + 1) * sizeof(WCHAR));
if ((es->undo_text = HeapReAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, es->undo_text, alloc_size))) {
- es->undo_buffer_size = alloc_size/sizeof(WCHAR);
+ es->undo_buffer_size = alloc_size/sizeof(WCHAR) - 1;
return TRUE;
}
else

This fixed heap corruption here for similar actions.

	Yes, that fixes the problem.

	Thanks!

Felipe


Reply via email to