Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-10-01 23:14:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

[WIN32K]

Browse source 
Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.

svn path=/trunk/; revision=54630
This commit is contained in:
Roel Messiant 2011-12-10 00:14:31 +00:00
parent f9533e5eba
commit 2e113743c9
1 changed files with 4 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
reactos/subsystems/win32/win32k/objects/icm.c
View file

@ -150,12 +150,8 @@ NtGdiGetDeviceGammaRamp(HDC hDC,
_SEH2_TRY
{
ProbeForWrite( Ramp,
sizeof(PVOID),
1);
RtlCopyMemory( Ramp,
SafeRamp,
sizeof(GAMMARAMP));
ProbeForWrite(Ramp, sizeof(GAMMARAMP), 1);
RtlCopyMemory(Ramp, SafeRamp, sizeof(GAMMARAMP));
}
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{
@ -376,12 +372,8 @@ NtGdiSetDeviceGammaRamp(HDC hDC,
}
_SEH2_TRY
{
ProbeForRead( Ramp,
sizeof(PVOID),
1);
RtlCopyMemory( SafeRamp,
Ramp,
sizeof(GAMMARAMP));
ProbeForRead(Ramp, sizeof(GAMMARAMP), 1);
RtlCopyMemory(SafeRamp, Ramp, sizeof(GAMMARAMP));
}
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{