[ros-diffs] [janderwald] 41517: - Fix a buffer overrun

janderwald at svn.reactos.org janderwald at svn.reactos.org
Sun Jun 21 23:35:41 CEST 2009


Author: janderwald
Date: Mon Jun 22 01:35:40 2009
New Revision: 41517

URL: http://svn.reactos.org/svn/reactos?rev=41517&view=rev
Log:
- Fix a buffer overrun

Modified:
    trunk/reactos/drivers/ksfilter/ks/irp.c

Modified: trunk/reactos/drivers/ksfilter/ks/irp.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/drivers/ksfilter/ks/irp.c?rev=41517&r1=41516&r2=41517&view=diff
==============================================================================
--- trunk/reactos/drivers/ksfilter/ks/irp.c [iso-8859-1] (original)
+++ trunk/reactos/drivers/ksfilter/ks/irp.c [iso-8859-1] Mon Jun 22 01:35:40 2009
@@ -775,9 +775,9 @@
                 if (IoStack->FileObject->FileName.Buffer[0] != L'{')
                 {
                     RtlMoveMemory(IoStack->FileObject->FileName.Buffer, &IoStack->FileObject->FileName.Buffer[Length+1],
-                                   IoStack->FileObject->FileName.Length - Length * sizeof(WCHAR));
-
-                    IoStack->FileObject->FileName.Length -= Length * sizeof(WCHAR);
+                                   IoStack->FileObject->FileName.Length - (Length + 1) * sizeof(WCHAR));
+
+                    IoStack->FileObject->FileName.Length -= (Length + 1)* sizeof(WCHAR);
                 }
 
 



More information about the Ros-diffs mailing list