[WIN32K]

In NtGdiGetTextExtentExW fail when Count is negative.

svn path=/trunk/; revision=56384

diff --git a/reactos/win32ss/gdi/ntgdi/text.c b/reactos/win32ss/gdi/ntgdi/text.c
index cc9cfdf..31dcbe2 100644 (file)
--- a/reactos/win32ss/gdi/ntgdi/text.c
+++ b/reactos/win32ss/gdi/ntgdi/text.c
@@ -278,6 +278,12 @@ NtGdiGetTextExtentExW(
     LPINT Dx;
     PTEXTOBJ TextObj;
 
+    if ((LONG)Count < 0)
+    {
+        EngSetLastError(ERROR_INVALID_PARAMETER);
+        return FALSE;
+    }
+
     /* FIXME: Handle fl */
 
     if (0 == Count)