A few years after
I posted this story,
the security team received something very similar.
If have found that if you call the
XYZ function
(whose last parameter is supposed to be a pointer to a )
and instead of passing a value pointer to a ,
you pass ,
then you can trigger an access violation in the XYZ function.
The XYZ function does not ...