https://git.reactos.org/?p=reactos.git;a=commitdiff;h=d84ab9ec7c513eb0917bc9f24f6dc97b70e8485b

commit d84ab9ec7c513eb0917bc9f24f6dc97b70e8485b
Author:     Pierre Schweitzer <[email protected]>
AuthorDate: Thu Jan 3 23:10:31 2019 +0100
Commit:     Pierre Schweitzer <[email protected]>
CommitDate: Thu Jan 3 23:12:16 2019 +0100

    [MOUNTMGR] Fix buffer length checking
    
    Found by Vadim Galiant.
    
    CORE-15549
---
 drivers/filters/mountmgr/device.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/filters/mountmgr/device.c 
b/drivers/filters/mountmgr/device.c
index 08b386daed..17d720e346 100644
--- a/drivers/filters/mountmgr/device.c
+++ b/drivers/filters/mountmgr/device.c
@@ -265,7 +265,7 @@ MountMgrCreatePoint(IN PDEVICE_EXTENSION DeviceExtension,
 
     MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength),
                     (Point->SymbolicLinkNameLength + 
Point->SymbolicLinkNameOffset));
-    if (MaxLength >= Stack->Parameters.DeviceIoControl.InputBufferLength)
+    if (MaxLength > Stack->Parameters.DeviceIoControl.InputBufferLength)
     {
         return STATUS_INVALID_PARAMETER;
     }

Reply via email to