https://git.reactos.org/?p=reactos.git;a=commitdiff;h=ff19ce934bf35768e3478…
commit ff19ce934bf35768e3478bf484ed4935bb826eb3
Author: Pierre Schweitzer <pierre(a)reactos.org>
AuthorDate: Fri Sep 6 08:30:18 2019 +0200
Commit: Pierre Schweitzer <pierre(a)reactos.org>
CommitDate: Fri Sep 6 08:30:18 2019 +0200
[MOUNTMGR] Don't overrun output buffer in QueryPointsFromMemory
---
drivers/filters/mountmgr/point.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/drivers/filters/mountmgr/point.c b/drivers/filters/mountmgr/point.c
index 77fc6fba95f..4c1d843db50 100644
--- a/drivers/filters/mountmgr/point.c
+++ b/drivers/filters/mountmgr/point.c
@@ -342,6 +342,8 @@ QueryPointsFromMemory(IN PDEVICE_EXTENSION DeviceExtension,
if (MountPoints->Size >
Stack->Parameters.DeviceIoControl.OutputBufferLength)
{
+ Irp->IoStatus.Information = sizeof(MOUNTMGR_MOUNT_POINTS);
+
return STATUS_BUFFER_OVERFLOW;
}