[Bug 20759] Read buffer overflow in NdrConformantArrayMarshall?

wine-bugs at winehq.org wine-bugs at winehq.org
Mon Nov 23 09:13:17 CST 2009


http://bugs.winehq.org/show_bug.cgi?id=20759





--- Comment #3 from Rob Shearman <robertshearman at gmail.com>  2009-11-23 09:13:16 ---
I can confirm that Alexandre is correct - widl matches MIDL in the size and
alignment of REMQIRESULT, so the problem is indeed in gcc's alignment of the
hyper & MIDL_uhyper types not matching what we expect.

I have a patch in my tree that changes hyper to use INT64 instead of __int64,
as Alexandre suggests, and this does indeed fix the discrepancy. I presume
Alexandre will commit such a change later today.

However, there are other places in the source tree where __int64 is used and
where the alignment will not be correct. These should be audited and fixed.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the wine-bugs mailing list