Author: cgutman Date: Mon Mar 16 22:26:38 2009 New Revision: 40065
URL: http://svn.reactos.org/svn/reactos?rev=40065&view=rev Log: - Don't access an index outside the array bounds - Fixes memory corruption when calling AfdGetSockName and AfdGetPeerName - This caused a high-side redzone overwrite when accessing some web sites
Modified: trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c
Modified: trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/lib/drivers/ip/transport/tc... ============================================================================== --- trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c [iso-8859-1] (original) +++ trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c [iso-8859-1] Mon Mar 16 22:26:38 2009 @@ -850,7 +850,6 @@ AddressIP->Address[0].AddressType = TDI_ADDRESS_TYPE_IP; AddressIP->Address[0].Address[0].sin_port = GetRemote ? RemotePort : LocalPort; AddressIP->Address[0].Address[0].in_addr = GetRemote ? RemoteAddress : LocalAddress; - AddressIP->Address[1].AddressLength = TDI_ADDRESS_LENGTH_IP;
TcpipRecursiveMutexLeave( &TCPLock );