ReceiveTempSMS
/
Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

dsound: Validate buffer pointers in Unlock methods.

This commit is contained in:
Andrew Eikum 2011-09-24 09:03:06 -05:00 committed by Alexandre Julliard
parent b1fdaa81b0
commit 7fae5f4f9f
2 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
dlls/dsound/buffer.c
View File

@ -651,6 +651,12 @@ static HRESULT WINAPI IDirectSoundBufferImpl_Unlock(IDirectSoundBuffer8 *iface,
if (!p2)
x2 = 0;
if((p1 && ((BYTE*)p1 < This->buffer->memory ||
(BYTE*)p1 >= This->buffer->memory + This->buflen)) ||
(p2 && ((BYTE*)p2 < This->buffer->memory ||
(BYTE*)p2 >= This->buffer->memory + This->buflen)))
return DSERR_INVALIDPARAM;
if (x1 || x2)
{
RtlAcquireResourceShared(&This->device->buffer_list_lock, TRUE);

6
dlls/dsound/primary.c
View File

@ -850,6 +850,12 @@ static HRESULT WINAPI PrimaryBufferImpl_Unlock(
return DSERR_PRIOLEVELNEEDED;
}
if((p1 && ((BYTE*)p1 < device->buffer ||
(BYTE*)p1 >= device->buffer + device->buflen)) ||
(p2 && ((BYTE*)p2 < device->buffer ||
(BYTE*)p2 >= device->buffer + device->buflen)))
return DSERR_INVALIDPARAM;
return DS_OK;
}