ReceiveTempSMS
/
Sweden-Number
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

setupapi: Fix buffer overflow in load_fake_dll. 

Found by Daniel Lehman.
This commit is contained in:
Alexandre Julliard 2012-10-12 11:21:14 +02:00
parent 8ed96ab041
commit 8418115edf
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
dlls/setupapi/fakedll.c
View File

@ -394,13 +394,13 @@ static void *load_fake_dll( const WCHAR *name, SIZE_T *size )
if ((p = strrchrW( name, '\\' ))) name = p + 1;
i = 0;
if (build_dir) maxlen = strlen(build_dir) + sizeof("/programs/") + strlenW(name);
len = strlenW( name );
if (build_dir) maxlen = strlen(build_dir) + sizeof("/programs/") + len;
while ((path = wine_dll_enum_load_path( i++ ))) maxlen = max( maxlen, strlen(path) );
maxlen += sizeof("/fakedlls") + strlenW(name) + 2;
maxlen += sizeof("/fakedlls") + len + sizeof(".fake");
if (!(file = HeapAlloc( GetProcessHeap(), 0, maxlen ))) return NULL;
len = strlenW( name );
pos = maxlen - len - sizeof(".fake");
if (!dll_name_WtoA( file + pos, name, len )) goto done;
file[--pos] = '/';