Microsoft Internet Explorer - CTreeNode::GetCascadedLang Use-After-Free (MS15-079)

function Trigger fori=0;...