[PATCH] mmdevapi: fixed buffer size passed to RegEnumKeyExW

Marcus Meissner marcus at jet.franken.de
Fri Dec 31 08:15:58 CST 2010


found by my overflow checking patches.

Ciao, Marcus
---
 dlls/mmdevapi/devenum.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/mmdevapi/devenum.c b/dlls/mmdevapi/devenum.c
index e53566a..d375de9 100644
--- a/dlls/mmdevapi/devenum.c
+++ b/dlls/mmdevapi/devenum.c
@@ -950,7 +950,7 @@ HRESULT MMDevEnum_Create(REFIID riid, void **ppv)
             DWORD len;
             PROPVARIANT pv = { VT_EMPTY };
 
-            len = sizeof(guidvalue);
+            len = sizeof(guidvalue)/sizeof(guidvalue[0]);
             ret = RegEnumKeyExW(cur, i++, guidvalue, &len, NULL, NULL, NULL, NULL);
             if (ret == ERROR_NO_MORE_ITEMS)
             {
-- 
1.7.1



More information about the wine-patches mailing list