Author: rmessiant
Date: Sat Dec 10 00:14:31 2011
New Revision: 54630
URL:
http://svn.reactos.org/svn/reactos?rev=54630&view=rev
Log:
[WIN32K]
Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.
Modified:
trunk/reactos/subsystems/win32/win32k/objects/icm.c
Modified: trunk/reactos/subsystems/win32/win32k/objects/icm.c
URL:
http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/ob…
==============================================================================
--- trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] (original)
+++ trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] Sat Dec 10 00:14:31
2011
@@ -150,12 +150,8 @@
_SEH2_TRY
{
- ProbeForWrite( Ramp,
- sizeof(PVOID),
- 1);
- RtlCopyMemory( Ramp,
- SafeRamp,
- sizeof(GAMMARAMP));
+ ProbeForWrite(Ramp, sizeof(GAMMARAMP), 1);
+ RtlCopyMemory(Ramp, SafeRamp, sizeof(GAMMARAMP));
}
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{
@@ -376,12 +372,8 @@
}
_SEH2_TRY
{
- ProbeForRead( Ramp,
- sizeof(PVOID),
- 1);
- RtlCopyMemory( SafeRamp,
- Ramp,
- sizeof(GAMMARAMP));
+ ProbeForRead(Ramp, sizeof(GAMMARAMP), 1);
+ RtlCopyMemory(SafeRamp, Ramp, sizeof(GAMMARAMP));
}
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{