Security fixes

[JaviLendi]

This pull request makes several improvements and bug fixes related to logging, memory safety, and Windows security descriptor handling. The key changes focus on correcting log formatting, preventing integer overflows, and strengthening registry key ACL initialization.

Logging improvements:

• Fixed the format specifier for hwndFrame in the CloseTab function to use %p for pointer types instead of %x, ensuring correct output on all platforms. (src/SumatraPDF.cpp, src/SumatraPDF.cppL3272-R3272)
• Corrected the argument placement in a logf call within ForAllUsersStateChanged, ensuring all log values are captured properly. (src/Installer.cpp, src/Installer.cppL615-R615)

Memory safety and correctness:

• Added explicit size_t casts in the buffer size calculation for WebPDecodeBGRAInto to prevent potential integer overflows when multiplying stride and height. (src/utils/WebpReader.cpp, src/utils/WebpReader.cppL41-R42)

Windows security improvements:

• Improved the robustness of the ResetRegKeyAcl function by checking the return values of InitializeSecurityDescriptor and InitializeAcl, and by using an empty ACL (instead of a nullptr) when setting the DACL, addressing best practices and preventing unprotected objects. (src/utils/WinUtil.cpp, src/utils/WinUtil.cppL568-R581)

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.