From ac976c94c822be156af719d5fe14da2cfd5ee53b Mon Sep 17 00:00:00 2001
From: James Hawkins <jhawkins@codeweavers.com>
Date: Mon, 28 Jul 2008 18:47:30 -0500
Subject: [PATCH] msi: Validate the szProduct parameter of
 MsiConfigureProductEx.

---
 dlls/msi/msi.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dlls/msi/msi.c b/dlls/msi/msi.c
index 0bd23fac949..f3d609032fc 100644
--- a/dlls/msi/msi.c
+++ b/dlls/msi/msi.c
@@ -357,6 +357,9 @@ UINT WINAPI MsiConfigureProductExW(LPCWSTR szProduct, int iInstallLevel,
     TRACE("%s %d %d %s\n",debugstr_w(szProduct), iInstallLevel, eInstallState,
           debugstr_w(szCommandLine));
 
+    if (!szProduct || lstrlenW(szProduct) != GUID_SIZE - 1)
+        return ERROR_INVALID_PARAMETER;
+
     if (eInstallState != INSTALLSTATE_LOCAL &&
         eInstallState != INSTALLSTATE_DEFAULT)
     {