Thomas Faber : rpcrt4: Correctly check for in-buffer memory in PointerFree.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 6a30cde7b04c3b8a28e93557ce5ce18d1e45931f
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=6a30cde7b04c3b8a28e93557ce5ce18d1e45931f

Author: Thomas Faber <thomas.faber at reactos.org>
Date:   Mon Aug 11 10:59:20 2014 +0200

rpcrt4: Correctly check for in-buffer memory in PointerFree.

---

 dlls/rpcrt4/ndr_marshall.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/rpcrt4/ndr_marshall.c b/dlls/rpcrt4/ndr_marshall.c
index 481b426..3f1762a 100644
--- a/dlls/rpcrt4/ndr_marshall.c
+++ b/dlls/rpcrt4/ndr_marshall.c
@@ -1138,7 +1138,7 @@ static void PointerFree(PMIDL_STUB_MESSAGE pStubMsg,
    * BufferStart and BufferEnd won't be reset when allocating memory for
    * sending the response. we don't have to check for the new buffer here as
    * it won't be used a type memory, only for buffer memory */
-  if (Pointer >= pStubMsg->BufferStart && Pointer < pStubMsg->BufferEnd)
+  if (Pointer >= pStubMsg->BufferStart && Pointer <= pStubMsg->BufferEnd)
       goto notfree;
 
   if (attr & RPC_FC_P_ONSTACK) {