[PATCH] server: Check reply size when copying key full name.

Paul Gofman pgofman at codeweavers.com
Tue Oct 6 07:05:18 CDT 2020


Fixes segfault in wineserver during ntdll reg test.

Signed-off-by: Paul Gofman <pgofman at codeweavers.com>
---
 server/registry.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server/registry.c b/server/registry.c
index 3b2d59fc725..c4451f3901d 100644
--- a/server/registry.c
+++ b/server/registry.c
@@ -978,7 +978,7 @@ static void enum_key( struct key *key, int index, int info_class, struct enum_ke
         else if (info_class == KeyNameInformation)
         {
             reply->namelen = namelen;
-            memcpy( data, fullname, namelen );
+            memcpy( data, fullname, min( len, namelen ));
         }
         else
         {
-- 
2.26.2




More information about the wine-devel mailing list