Author: rmessiant Date: Sat Dec 10 00:14:31 2011 New Revision: 54630
URL: http://svn.reactos.org/svn/reactos?rev=54630&view=rev Log: [WIN32K] Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.
Modified: trunk/reactos/subsystems/win32/win32k/objects/icm.c
Modified: trunk/reactos/subsystems/win32/win32k/objects/icm.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/obj... ============================================================================== --- trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] (original) +++ trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] Sat Dec 10 00:14:31 2011 @@ -150,12 +150,8 @@
_SEH2_TRY { - ProbeForWrite( Ramp, - sizeof(PVOID), - 1); - RtlCopyMemory( Ramp, - SafeRamp, - sizeof(GAMMARAMP)); + ProbeForWrite(Ramp, sizeof(GAMMARAMP), 1); + RtlCopyMemory(Ramp, SafeRamp, sizeof(GAMMARAMP)); } _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER) { @@ -376,12 +372,8 @@ } _SEH2_TRY { - ProbeForRead( Ramp, - sizeof(PVOID), - 1); - RtlCopyMemory( SafeRamp, - Ramp, - sizeof(GAMMARAMP)); + ProbeForRead(Ramp, sizeof(GAMMARAMP), 1); + RtlCopyMemory(SafeRamp, Ramp, sizeof(GAMMARAMP)); } _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER) {