https://git.reactos.org/?p=reactos.git;a=commitdiff;h=d84ab9ec7c513eb0917bc…
commit d84ab9ec7c513eb0917bc9f24f6dc97b70e8485b
Author: Pierre Schweitzer <pierre(a)reactos.org>
AuthorDate: Thu Jan 3 23:10:31 2019 +0100
Commit: Pierre Schweitzer <pierre(a)reactos.org>
CommitDate: Thu Jan 3 23:12:16 2019 +0100
[MOUNTMGR] Fix buffer length checking
Found by Vadim Galiant.
CORE-15549
---
drivers/filters/mountmgr/device.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/filters/mountmgr/device.c b/drivers/filters/mountmgr/device.c
index 08b386daed..17d720e346 100644
--- a/drivers/filters/mountmgr/device.c
+++ b/drivers/filters/mountmgr/device.c
@@ -265,7 +265,7 @@ MountMgrCreatePoint(IN PDEVICE_EXTENSION DeviceExtension,
MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength),
(Point->SymbolicLinkNameLength +
Point->SymbolicLinkNameOffset));
- if (MaxLength >= Stack->Parameters.DeviceIoControl.InputBufferLength)
+ if (MaxLength > Stack->Parameters.DeviceIoControl.InputBufferLength)
{
return STATUS_INVALID_PARAMETER;
}