Memory bug in XTPMarkupStatic : In Source/Controls/Static/XTPMarkupStatic.cpp,...

Mon, 15 Jun 2026 16:08:29 +0000

Author: DavidH
Subject: 24646
Posted: 15 June 2026 at 4:08pm

In Source/Controls/Static/XTPMarkupStatic.cpp, a growing buffer is not reallocated correctly.

template
AFX_INLINE BOOL XTPStrPushChr(T*& pStr, T ch, SIZE_T& nPos, SIZE_T& nSize)
{
if (NULL == pStr)
{
nSize = 0x100;
pStr = (T*)malloc(nSize * sizeof(T));
if (NULL == pStr)
return FALSE;

*pStr = T('\0');
nPos = 0;
}

pStr[nPos] = ch;
if (++nPos == nSize)
{
nSize *= 2;
// --->>>> pStr = (T*)realloc(pStr, nSize);

// Should be:

pStr = (T*)realloc(pStr, nSize * sizeof(T));
if (NULL == pStr)
return FALSE;

pStr[nPos] = T('\0');
}

return TRUE;
}

Codejock Developer Community : Memory bug in XTPMarkupStatic

Memory bug in XTPMarkupStatic : In Source/Controls/Static/XTPMarkupStatic.cpp,...