Zebediah Figura zfigura@codeweavers.com writes:
- DWORD len;
- if ((dst = HeapAlloc(GetProcessHeap(), 0, len * sizeof(WCHAR))))
sprintfW(dst, formatW, ext->busid, ext->vid, ext->pid);
- if (ext->input == (WORD)-1)
- {
len = snprintfW(NULL, 0, formatW, ext->busid, ext->vid, ext->pid);
This can't work, snprintfW returns -1 on overflow.