Author: cgutman
Date: Mon Mar 16 22:26:38 2009
New Revision: 40065
URL:
http://svn.reactos.org/svn/reactos?rev=40065&view=rev
Log:
- Don't access an index outside the array bounds
- Fixes memory corruption when calling AfdGetSockName and AfdGetPeerName
- This caused a high-side redzone overwrite when accessing some web sites
Modified:
trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c
Modified: trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c
URL:
http://svn.reactos.org/svn/reactos/trunk/reactos/lib/drivers/ip/transport/t…
==============================================================================
--- trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c [iso-8859-1] (original)
+++ trunk/reactos/lib/drivers/ip/transport/tcp/tcp.c [iso-8859-1] Mon Mar 16 22:26:38
2009
@@ -850,7 +850,6 @@
AddressIP->Address[0].AddressType = TDI_ADDRESS_TYPE_IP;
AddressIP->Address[0].Address[0].sin_port = GetRemote ? RemotePort : LocalPort;
AddressIP->Address[0].Address[0].in_addr = GetRemote ? RemoteAddress :
LocalAddress;
- AddressIP->Address[1].AddressLength = TDI_ADDRESS_LENGTH_IP;
TcpipRecursiveMutexLeave( &TCPLock );