rpcrt4: Introduce a new function, safe_multiply, which will raise an exception if a multiply overflows a 4-byte integer.

Robert Shearman rob at codeweavers.com
Sun Jun 4 19:41:50 CDT 2006


This will protect the unmarshaling code against attacks specifying a 
large variance.

Use this new function in the conformant string functions to harden them 
against attack.

---

  dlls/rpcrt4/ndr_marshall.c |   61 
+++++++++++++++++++++++++++++++++++---------
  1 files changed, 49 insertions(+), 12 deletions(-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 4dd9f2959e18105a7836b895430a88866cdecc1b.diff
Type: text/x-patch
Size: 4216 bytes
Desc: not available
Url : http://www.winehq.org/pipermail/wine-patches/attachments/20060605/dbb5bd5b/4dd9f2959e18105a7836b895430a88866cdecc1b.diff


More information about the wine-patches mailing list