From 54e904e780e7c6c6b05f818932f684d4f0d46750 Mon Sep 17 00:00:00 2001 From: Rob Shearman Date: Sun, 10 Aug 2008 18:23:31 +0100 Subject: [PATCH] rpcrt4: Fix crash calculation of tower size in rpcrt4_ncalrpc_get_top_of_tower. The size depends on the length of the endpoint string, not the network address string. --- dlls/rpcrt4/rpc_transport.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dlls/rpcrt4/rpc_transport.c b/dlls/rpcrt4/rpc_transport.c index 86c4e4f28dd..6e57ee72ca8 100644 --- a/dlls/rpcrt4/rpc_transport.c +++ b/dlls/rpcrt4/rpc_transport.c @@ -677,7 +677,7 @@ static size_t rpcrt4_ncalrpc_get_top_of_tower(unsigned char *tower_data, TRACE("(%p, %s, %s)\n", tower_data, networkaddr, endpoint); - endpoint_size = strlen(networkaddr) + 1; + endpoint_size = strlen(endpoint) + 1; size = sizeof(*pipe_floor) + endpoint_size; if (!tower_data)