https://git.reactos.org/?p=reactos.git;a=commitdiff;h=d84ab9ec7c513eb0917bc9...
commit d84ab9ec7c513eb0917bc9f24f6dc97b70e8485b Author: Pierre Schweitzer pierre@reactos.org AuthorDate: Thu Jan 3 23:10:31 2019 +0100 Commit: Pierre Schweitzer pierre@reactos.org CommitDate: Thu Jan 3 23:12:16 2019 +0100
[MOUNTMGR] Fix buffer length checking
Found by Vadim Galiant.
CORE-15549 --- drivers/filters/mountmgr/device.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/filters/mountmgr/device.c b/drivers/filters/mountmgr/device.c index 08b386daed..17d720e346 100644 --- a/drivers/filters/mountmgr/device.c +++ b/drivers/filters/mountmgr/device.c @@ -265,7 +265,7 @@ MountMgrCreatePoint(IN PDEVICE_EXTENSION DeviceExtension,
MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength), (Point->SymbolicLinkNameLength + Point->SymbolicLinkNameOffset)); - if (MaxLength >= Stack->Parameters.DeviceIoControl.InputBufferLength) + if (MaxLength > Stack->Parameters.DeviceIoControl.InputBufferLength) { return STATUS_INVALID_PARAMETER; }