[PATCH 1/8] rpcrt4: Introduce a new function, safe_multiply, which will raise an exception if a multiply overflows a 4-byte integer.

Robert Shearman rob at codeweavers.com
Sat Jun 10 06:31:45 CDT 2006


This will protect the unmarshaling code against attacks specifying a 
large variance.

Use this new function in the conformant string functions to harden them 
against attack.

---

  dlls/rpcrt4/ndr_marshall.c |   48 
+++++++++++++++++++++++++++++++++-----------
  1 files changed, 36 insertions(+), 12 deletions(-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 333c77744b0b57e6702dda6ee05cf7ffc3f3310f.diff
Type: text/x-patch
Size: 3763 bytes
Desc: not available
Url : http://www.winehq.org/pipermail/wine-patches/attachments/20060610/76bf8651/333c77744b0b57e6702dda6ee05cf7ffc3f3310f.diff


More information about the wine-patches mailing list