K 10 svn:author V 6 philip K 8 svn:date V 27 2007-12-06T09:52:28.000000Z K 7 svn:log V 259 MFC r1.34: Plug two potential (root-only, local) information leaks. buf is not initialized before use and returned integrally instead of up to size. Submitted by: Ilja van Sprundel Reviewed by: secteam Approved by: re (kensmith) END