rpcrt4: Fix the buffer bounds check
Dmitry Timoshkov
dmitry at codeweavers.com
Thu Jul 19 00:56:18 CDT 2007
Hello,
Changelog:
rpcrt4: Fix the buffer bounds check.
---
dlls/rpcrt4/ndr_marshall.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
diff --git a/dlls/rpcrt4/ndr_marshall.c b/dlls/rpcrt4/ndr_marshall.c
index 26a55b1..b1b8fa3 100644
--- a/dlls/rpcrt4/ndr_marshall.c
+++ b/dlls/rpcrt4/ndr_marshall.c
@@ -759,7 +759,7 @@ unsigned char *WINAPI NdrConformantStringUnmarshall( PMIDL_STUB_MESSAGE pStubMsg
/* verify the buffer is safe to access */
if ((pStubMsg->Buffer + bufsize < pStubMsg->Buffer) ||
- (pStubMsg->Buffer + bufsize < pStubMsg->BufferEnd))
+ (pStubMsg->Buffer + bufsize > pStubMsg->BufferEnd))
{
ERR("bufsize 0x%x exceeded buffer end %p of buffer %p\n", bufsize,
pStubMsg->BufferEnd, pStubMsg->Buffer);
--
1.5.2.3
More information about the wine-patches
mailing list