STDCALL
NtGdiCreateEllipticRgnIndirect(CONST PRECT Rect)
{
- RECT SafeRect;
+ RECT SafeRect = {0};
NTSTATUS Status = STATUS_SUCCESS;
_SEH_TRY
HRGN STDCALL
NtGdiCreateRectRgnIndirect(CONST PRECT rc)
{
- RECT SafeRc;
+ RECT SafeRc = {0};
NTSTATUS Status = STATUS_SUCCESS;
_SEH_TRY
ProbeForRead(PolyCounts,
Count * sizeof(INT),
1);
+ /* just probe one point for now, we don't know the length of the array yet */
ProbeForRead(pt,
- nPoints * sizeof(POINT),
+ sizeof(POINT),
1);
}
_SEH_HANDLE
_SEH_TRY
{
+ ProbeForRead(pt,
+ nPoints * sizeof(POINT),
+ 1);
/* pointers were already probed! */
RtlCopyMemory(Safept,
pt,
- Count * sizeof(POINT));
+ nPoints * sizeof(POINT));
}
_SEH_HANDLE
{