https://git.reactos.org/?p=reactos.git;a=commitdiff;h=ff19ce934bf35768e3478b...
commit ff19ce934bf35768e3478bf484ed4935bb826eb3 Author: Pierre Schweitzer pierre@reactos.org AuthorDate: Fri Sep 6 08:30:18 2019 +0200 Commit: Pierre Schweitzer pierre@reactos.org CommitDate: Fri Sep 6 08:30:18 2019 +0200
[MOUNTMGR] Don't overrun output buffer in QueryPointsFromMemory --- drivers/filters/mountmgr/point.c | 2 ++ 1 file changed, 2 insertions(+)
diff --git a/drivers/filters/mountmgr/point.c b/drivers/filters/mountmgr/point.c index 77fc6fba95f..4c1d843db50 100644 --- a/drivers/filters/mountmgr/point.c +++ b/drivers/filters/mountmgr/point.c @@ -342,6 +342,8 @@ QueryPointsFromMemory(IN PDEVICE_EXTENSION DeviceExtension,
if (MountPoints->Size > Stack->Parameters.DeviceIoControl.OutputBufferLength) { + Irp->IoStatus.Information = sizeof(MOUNTMGR_MOUNT_POINTS); + return STATUS_BUFFER_OVERFLOW; }