[Bug 14499] New: ImageDirectoryEntryToDataEx: section header param [out, optional], needs to be zeroed before RtlImageRvaToVa

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=14499

           Summary: ImageDirectoryEntryToDataEx: section header param [out,
                    optional], needs to be zeroed before RtlImageRvaToVa
           Product: Wine
           Version: CVS/GIT
          Platform: PC
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: dbghelp
        AssignedTo: wine-bugs at winehq.org
        ReportedBy: focht at gmx.net


Hello,

a quickie, as title says.
Section header param passed to ImageDirectoryEntryToDataEx is [out, optional].
Crashes RtlImageRvaToVa if caller doesn't initialize the out param to zero
(stack var).

--- snip ---
..
0020:Call
dbghelp.ImageDirectoryEntryToDataEx(00340000,00000000,00000006,0032cc34,0032cc38)
ret=004048ec
0020:Call ntdll.RtlImageNtHeader(00340000) ret=6076ce7b
0020:Ret  ntdll.RtlImageNtHeader() retval=003400e8 ret=6076ce7b
0020:Call ntdll.RtlImageRvaToVa(003400e8,00340000,00001270,0032cc38)
ret=6076ceeb
0020:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc4337a
--- snip ---

Fix: unconditionally "if (section) *section = NULL" on
ImageDirectoryEntryToDataEx entry (like size).

Regards


-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.