[Bug 49279] New: Possible array out of bounds in mci.c

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=49279

            Bug ID: 49279
           Summary: Possible array out of bounds in mci.c
           Product: Wine
           Version: 5.9
          Hardware: x86
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: winmm&mci
          Assignee: wine-bugs at winehq.org
          Reporter: mikrutrafal54 at gmail.com
      Distribution: ---

Trace can use invalid memory, because index are checked after use.

```
    TRACE("Dumping cmdTbl=%d [lpTable=%p devType=%d]\n",
      uTbl, S_MciCmdTable[uTbl].lpTable, S_MciCmdTable[uTbl].uDevType);

    if (uTbl >= MAX_MCICMDTABLE || !S_MciCmdTable[uTbl].lpTable)
    return FALSE;
```

https://github.com/wine-mirror/wine/blob/6d801377055911d914226a3c6af8d8637a63fa13/dlls/winmm/mci.c#L588-L592

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.