https://bugs.winehq.org/show_bug.cgi?id=49280
Bug ID: 49280 Summary: Possible usage of null pointer line_def in edit.c Product: Wine Version: 5.9 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: comctl32 Assignee: wine-bugs@winehq.org Reporter: mikrutrafal54@gmail.com Distribution: ---
`line_def` may be null(based on condition on while loop) but is used later `line_def->width`
``` while (line_def && line_idx) { line_def = line_def->next; line_idx--; } w = es->format_rect.right - es->format_rect.left; lw = line_def->width; ```
https://github.com/wine-mirror/wine/blob/f0ad5b5c546d17b281aef13fde996cda08d...
https://bugs.winehq.org/show_bug.cgi?id=49280
--- Comment #1 from RafaĆ Mikrut mikrutrafal54@gmail.com --- Here are same logic
https://github.com/wine-mirror/wine/blob/f0ad5b5c546d17b281aef13fde996cda08d...
http://bugs.winehq.org/show_bug.cgi?id=49280
KRosUser kyle.kcsoftwares@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |kyle.kcsoftwares@gmail.com
--- Comment #2 from KRosUser kyle.kcsoftwares@gmail.com --- Still present in Wine 10.7: https://github.com/wine-mirror/wine/blob/master/dlls/user32/edit.c#L2222