From b2ec16885cdeac20a0c4d77fa8b26df2fa304ec4 Mon Sep 17 00:00:00 2001
From: Pierre Schweitzer <pierre@reactos.org>
Date: Sun, 6 Apr 2014 20:14:16 +0000
Subject: [PATCH] [CHARMAP] Fix buffer overruns. Dedicated to Thomas :-).

CID #515199
CID #512920

svn path=/trunk/; revision=62674
---
 reactos/base/applications/charmap/lrgcell.c | 5 +++--
 reactos/base/applications/charmap/map.c     | 5 +++--
 2 files changed, 6 insertions(+), 4 deletions(-)

diff --git a/reactos/base/applications/charmap/lrgcell.c b/reactos/base/applications/charmap/lrgcell.c
index b5fef4dbb11..23b253aae70 100644
--- a/reactos/base/applications/charmap/lrgcell.c
+++ b/reactos/base/applications/charmap/lrgcell.c
@@ -48,8 +48,9 @@ SetLrgFont(PMAP infoPtr)
                       hdc);
 
             lf.lfCharSet =  DEFAULT_CHARSET;
-            wcscpy(lf.lfFaceName,
-                   lpFontName);
+            wcscpy_s(lf.lfFaceName,
+                     sizeof(lf.lfFaceName) / sizeof(lf.lfFaceName[0]),
+                     lpFontName);
 
             hFont = CreateFontIndirectW(&lf);
 
diff --git a/reactos/base/applications/charmap/map.c b/reactos/base/applications/charmap/map.c
index 0029656cd1f..43aefcfe783 100644
--- a/reactos/base/applications/charmap/map.c
+++ b/reactos/base/applications/charmap/map.c
@@ -228,8 +228,9 @@ SetFont(PMAP infoPtr,
     ReleaseDC(infoPtr->hMapWnd, hdc);
 
     infoPtr->CurrentFont.lfCharSet =  DEFAULT_CHARSET;
-    wcscpy(infoPtr->CurrentFont.lfFaceName,
-           lpFontName);
+    wcscpy_s(infoPtr->CurrentFont.lfFaceName,
+             sizeof(infoPtr->CurrentFont.lfFaceName) / sizeof(infoPtr->CurrentFont.lfFaceName[0]),
+             lpFontName);
 
     infoPtr->hFont = CreateFontIndirectW(&infoPtr->CurrentFont);