[WIN32K:NTUSER] Reference menus owned by a popup menu. CORE-15504

This commit is contained in:
Thomas Faber
2018-12-28 13:39:23 +01:00
parent a9b88efa7c
commit e3c8002dfc

View File

@@ -4512,6 +4512,10 @@ PopupMenuWndProc(
{
CREATESTRUCTW *cs = (CREATESTRUCTW *) lParam;
pPopupMenu->spmenu = UserGetMenuObject(cs->lpCreateParams);
if (pPopupMenu->spmenu)
{
UserReferenceObject(pPopupMenu->spmenu);
}
break;
}
@@ -4556,6 +4560,10 @@ PopupMenuWndProc(
case WM_NCDESTROY:
{
if (pPopupMenu->spmenu)
{
IntReleaseMenuObject(pPopupMenu->spmenu);
}
DesktopHeapFree(Wnd->head.rpdesk, pPopupMenu );
((PMENUWND)Wnd)->ppopupmenu = 0;
Wnd->fnid = FNID_DESTROY;
@@ -4571,6 +4579,11 @@ PopupMenuWndProc(
ERR("Bad Menu Handle\n");
break;
}
UserReferenceObject(pmenu);
if (pPopupMenu->spmenu)
{
IntReleaseMenuObject(pPopupMenu->spmenu);
}
pPopupMenu->spmenu = pmenu;
break;
}