ReceiveTempSMS/Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

wininet: Retrieve the maximum token length from the SSP and use a buffer of that length in calls to InitializeSecurityContextW.

Browse Source 
Otherwise, InitializeSecurityContextW could run out of space with our
small, fixed buffer and fail.
This commit is contained in:
Rob Shearman 2008-03-10 16:41:44 +00:00 committed by Alexandre Julliard
parent 7631bdf0c1
commit 0be05ab6aa
1 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
dlls/wininet/http.c
View File

@ -98,6 +98,7 @@ struct HttpAuthInfo
CtxtHandle ctx; CtxtHandle ctx;
TimeStamp exp; TimeStamp exp;
ULONG attr; ULONG attr;
ULONG max_token;
void *auth_data; void *auth_data;
unsigned int auth_data_len; unsigned int auth_data_len;
BOOL finished; /* finished authenticating */ BOOL finished; /* finished authenticating */
@ -476,6 +477,16 @@ static BOOL HTTP_DoAuthorization( LPWININETHTTPREQW lpwhr, LPCWSTR pszAuthValue,
pAuthData, NULL, pAuthData, NULL,
NULL, &pAuthInfo->cred, NULL, &pAuthInfo->cred,
&exp); &exp);
if (sec_status == SEC_E_OK)
{
PSecPkgInfoW sec_pkg_info;
sec_status = QuerySecurityPackageInfoW(pAuthInfo->scheme, &sec_pkg_info);
if (sec_status == SEC_E_OK)
{
pAuthInfo->max_token = sec_pkg_info->cbMaxToken;
FreeContextBuffer(sec_pkg_info);
}
}
if (sec_status != SEC_E_OK) if (sec_status != SEC_E_OK)
{ {
WARN("AcquireCredentialsHandleW for scheme %s failed with error 0x%08x\n", WARN("AcquireCredentialsHandleW for scheme %s failed with error 0x%08x\n",
@ -554,10 +565,10 @@ static BOOL HTTP_DoAuthorization( LPWININETHTTPREQW lpwhr, LPCWSTR pszAuthValue,
HTTP_DecodeBase64(pszAuthData, in.pvBuffer); HTTP_DecodeBase64(pszAuthData, in.pvBuffer);
} }
buffer = HeapAlloc(GetProcessHeap(), 0, 0x100); buffer = HeapAlloc(GetProcessHeap(), 0, pAuthInfo->max_token);
out.BufferType = SECBUFFER_TOKEN; out.BufferType = SECBUFFER_TOKEN;
out.cbBuffer = 0x100; out.cbBuffer = pAuthInfo->max_token;
out.pvBuffer = buffer; out.pvBuffer = buffer;
out_desc.ulVersion = 0; out_desc.ulVersion = 0;