- CopyAcceleratorTable can cause a buffer overflow because it uses an

- CopyAcceleratorTable can cause a buffer overflow because it uses an
  incorrect comparison between the number of accelerator entries
  available and the number of accelerator entries in the output buffer.
- My tests show that CopyAcceleratorTable always strips the high bit
  of the fVirt member of the accel struct.
- Calling DestroyAcceleratorTable with a NULL accelerator should
  return FALSE.