mf at svn.reactos.com wrote: >- LPXSSTR buffer = (LPXSSTR)alloca(5*sizeof(XS_CHAR)*XS_len(s)); // worst case. "&" > > >+ LPXSSTR buffer = (LPXSSTR)alloca(6*sizeof(XS_CHAR)*XS_len(s)); // worst case """ / "'" > > http://www.notestips.com/80256B3A007F2692/1/NAMO5FTHEJ ± ε