https://git.reactos.org/?p=reactos.git;a=commitdiff;h=a081e12fbdc181904c226c...
commit a081e12fbdc181904c226c2e7db1c57f61e5cd48 Author: Nguyen Trung Khanh nguyentrungkhanh97@gmail.com AuthorDate: Tue Aug 25 23:14:23 2020 +0700 Commit: GitHub noreply@github.com CommitDate: Tue Aug 25 19:14:23 2020 +0300
[NTGDI] Fix pool memory disclosure in NtGdiGetGlyphOutline (#3021) --- win32ss/gdi/ntgdi/font.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/win32ss/gdi/ntgdi/font.c b/win32ss/gdi/ntgdi/font.c index 876fb02536c..1db1284615b 100644 --- a/win32ss/gdi/ntgdi/font.c +++ b/win32ss/gdi/ntgdi/font.c @@ -743,7 +743,7 @@ NtGdiGetGlyphOutline(
if (UnsafeBuf && cjBuf) { - pvBuf = ExAllocatePoolWithTag(PagedPool, cjBuf, GDITAG_TEXT); + pvBuf = ExAllocatePoolZero(PagedPool, cjBuf, GDITAG_TEXT); if (!pvBuf) { EngSetLastError(ERROR_NOT_ENOUGH_MEMORY);