Lilia Roumiantseva
cbCountSizeOfEnhMetafile callback function instead of increasing a
contents of the pointer to the size increased the pointer itself.

objects/enhmetafile.c

diff --git a/objects/enhmetafile.c b/objects/enhmetafile.c
index 21a95c7..6a4e3f8 100644
--- a/objects/enhmetafile.c
+++ b/objects/enhmetafile.c
@@ -269,7 +269,7 @@
 {
   LPUINT uSizeOfRecordData = (LPUINT)lpData;
 
-  uSizeOfRecordData += lpEMR->nSize;
+  *uSizeOfRecordData += lpEMR->nSize;
 
   return TRUE;
 }