[ros-diffs] [rmessiant] 54630: [WIN32K] Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.

[rmessiant at svn.reactos.org]

Author: rmessiant
Date: Sat Dec 10 00:14:31 2011
New Revision: 54630

URL: http://svn.reactos.org/svn/reactos?rev=54630&view=rev
Log:
[WIN32K]
Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.

Modified:
    trunk/reactos/subsystems/win32/win32k/objects/icm.c

Modified: trunk/reactos/subsystems/win32/win32k/objects/icm.c
URL: http://svn.reactos.org/svn/reactos/trunk/reactos/subsystems/win32/win32k/objects/icm.c?rev=54630&r1=54629&r2=54630&view=diff
==============================================================================
--- trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] (original)
+++ trunk/reactos/subsystems/win32/win32k/objects/icm.c [iso-8859-1] Sat Dec 10 00:14:31 2011
@@ -150,12 +150,8 @@
 
   _SEH2_TRY
   {
-     ProbeForWrite( Ramp,
-                    sizeof(PVOID),
-                    1);
-     RtlCopyMemory( Ramp,
-                    SafeRamp,
-                    sizeof(GAMMARAMP));
+     ProbeForWrite(Ramp, sizeof(GAMMARAMP), 1);
+     RtlCopyMemory(Ramp, SafeRamp, sizeof(GAMMARAMP));
   }
   _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
   {
@@ -376,12 +372,8 @@
   }
   _SEH2_TRY
   {
-     ProbeForRead( Ramp,
-                   sizeof(PVOID),
-                   1);
-     RtlCopyMemory( SafeRamp,
-                    Ramp,
-                    sizeof(GAMMARAMP));
+     ProbeForRead(Ramp, sizeof(GAMMARAMP), 1);
+     RtlCopyMemory(SafeRamp, Ramp, sizeof(GAMMARAMP));
   }
   _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
   {