From 0c36384132f07f7dc087fedcc3a240221715f2b8 Mon Sep 17 00:00:00 2001
From: "yokoyama%netscape.com" <yokoyama%netscape.com>
Date: Wed, 26 Sep 2001 19:33:19 +0000
Subject: [PATCH] Bug 90910 Allocate correct size of buffer in BYTE for IME
 Composition String. /r=shanjian; /sr=waterson

---
 widget/src/windows/nsWindow.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/widget/src/windows/nsWindow.cpp b/widget/src/windows/nsWindow.cpp
index 0edaeb38b5c6..4d433770cab7 100644
--- a/widget/src/windows/nsWindow.cpp
+++ b/widget/src/windows/nsWindow.cpp
@@ -4989,7 +4989,7 @@ BOOL nsWindow::OnIMEComposition(LPARAM  aGCS)
       mIMECompUnicode->SetCapacity((compStrLen / sizeof(WCHAR))+1);
 
       NS_IMM_GETCOMPOSITIONSTRINGW(hIMEContext, GCS_RESULTSTR,
-        (LPVOID)mIMECompUnicode->get(), mIMECompString->mCapacity, compStrLen);
+        (LPVOID)mIMECompUnicode->get(), (mIMECompString->mCapacity * sizeof(WCHAR)), compStrLen);
       compStrLen = compStrLen / sizeof(WCHAR);
       ((PRUnichar*)mIMECompUnicode->get())[compStrLen] = '\0';
       mIMECompUnicode->mLength = compStrLen;
@@ -5127,7 +5127,7 @@ BOOL nsWindow::OnIMEComposition(LPARAM  aGCS)
       NS_IMM_GETCOMPOSITIONSTRINGW(hIMEContext,
         GCS_COMPSTR,
         (LPVOID)mIMECompUnicode->get(),
-        mIMECompUnicode->mCapacity, compStrLen);
+        (mIMECompUnicode->mCapacity * sizeof(WCHAR)), compStrLen);
       compStrLen = compStrLen / sizeof(WCHAR);
       ((PRUnichar*)mIMECompUnicode->get())[compStrLen] = '\0';
       mIMECompUnicode->mLength = compStrLen;