[cgutman] 35292: - Check for FCB->TdiDeviceName.Buffer before attempting to access it - Fix 2 more memory leaks

Author: cgutman
Date: Tue Aug 12 15:03:53 2008
New Revision: 35292

URL: http://svn.reactos.org/svn/reactos?rev=35292&view=rev
Log:
 - Check for FCB->TdiDeviceName.Buffer before attempting to access it
 - Fix 2 more memory leaks

Modified:
    branches/aicom-network-fixes/drivers/network/afd/afd/main.c

Modified: branches/aicom-network-fixes/drivers/network/afd/afd/main.c
URL: http://svn.reactos.org/svn/reactos/branches/aicom-network-fixes/drivers/netw...
==============================================================================
--- branches/aicom-network-fixes/drivers/network/afd/afd/main.c [iso-8859-1] (original)
+++ branches/aicom-network-fixes/drivers/network/afd/afd/main.c [iso-8859-1] Tue Aug 12 15:03:53 2008
@@ -114,9 +114,6 @@
    FCB->TdiDeviceName.MaximumLength = FCB->TdiDeviceName.Length;
    FCB->TdiDeviceName.Buffer =
        ExAllocatePool( NonPagedPool, FCB->TdiDeviceName.Length );
-	RtlCopyMemory( FCB->TdiDeviceName.Buffer,
-		       ConnectInfo->TransportName,
-		       FCB->TdiDeviceName.Length );

if( !FCB->TdiDeviceName.Buffer ) {
        ExFreePool(FCB);
@@ -125,6 +122,10 @@
        IoCompleteRequest( Irp, IO_NETWORK_INCREMENT );
        return STATUS_NO_MEMORY;
    }
+
+	RtlCopyMemory( FCB->TdiDeviceName.Buffer,
+		       ConnectInfo->TransportName,
+		       FCB->TdiDeviceName.Length );

AFD_DbgPrint(MID_TRACE,("Success: %s %wZ\n",
    			EaInfo->EaName, &FCB->TdiDeviceName));
@@ -192,6 +193,9 @@
        InFlightRequest[i]->InFlightRequest->IoStatus.Status = STATUS_CANCELLED;
        InFlightRequest[i]->InFlightRequest->IoStatus.Information = 0;
        IoCancelIrp( InFlightRequest[i]->InFlightRequest );
+	    InFlightRequest[i]->InFlightRequest = NULL;
+	    if( InFlightRequest[i]->ConnectionCallInfo ) ExFreePool( InFlightRequest[i]->ConnectionCallInfo );
+	    if( InFlightRequest[i]->ConnectionReturnInfo ) ExFreePool( InFlightRequest[i]->ConnectionReturnInfo );
    }
     }