Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-08-05 14:43:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

[WIN32K]

Browse source 
Probe the whole GAMMARAMP struct before reading/writing from it. CID 14114 & 14115.

svn path=/trunk/; revision=54630
This commit is contained in:
Roel Messiant 2011-12-10 00:14:31 +00:00
parent f9533e5eba
commit 2e113743c9
1 changed files with 4 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

16
reactos/subsystems/win32/win32k/objects/icm.c
View file

@ -150,12 +150,8 @@ NtGdiGetDeviceGammaRamp(HDC hDC,
_SEH2_TRY _SEH2_TRY
{ {
ProbeForWrite( Ramp, ProbeForWrite(Ramp, sizeof(GAMMARAMP), 1);
sizeof(PVOID), RtlCopyMemory(Ramp, SafeRamp, sizeof(GAMMARAMP));
1);
RtlCopyMemory( Ramp,
SafeRamp,
sizeof(GAMMARAMP));
} }
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER) _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{ {
@ -376,12 +372,8 @@ NtGdiSetDeviceGammaRamp(HDC hDC,
} }
_SEH2_TRY _SEH2_TRY
{ {
ProbeForRead( Ramp, ProbeForRead(Ramp, sizeof(GAMMARAMP), 1);
sizeof(PVOID), RtlCopyMemory(SafeRamp, Ramp, sizeof(GAMMARAMP));
1);
RtlCopyMemory( SafeRamp,
Ramp,
sizeof(GAMMARAMP));
} }
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER) _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{ {