mirror of
https://github.com/reactos/reactos.git
synced 2024-09-30 14:37:45 +00:00
[AFD]
- Fix the allocation size for AFD_ACTIVE_POLL to fix a 1 byte non-paged pool overrun svn path=/trunk/; revision=54576
This commit is contained in:
parent
17954a4f65
commit
621c5a5680
|
@ -163,9 +163,6 @@ AfdSelect( PDEVICE_OBJECT DeviceObject, PIRP Irp,
|
||||||
PFILE_OBJECT FileObject;
|
PFILE_OBJECT FileObject;
|
||||||
PAFD_POLL_INFO PollReq = Irp->AssociatedIrp.SystemBuffer;
|
PAFD_POLL_INFO PollReq = Irp->AssociatedIrp.SystemBuffer;
|
||||||
PAFD_DEVICE_EXTENSION DeviceExt = DeviceObject->DeviceExtension;
|
PAFD_DEVICE_EXTENSION DeviceExt = DeviceObject->DeviceExtension;
|
||||||
UINT CopySize = IrpSp->Parameters.DeviceIoControl.InputBufferLength;
|
|
||||||
UINT AllocSize =
|
|
||||||
CopySize + sizeof(AFD_ACTIVE_POLL) - sizeof(AFD_POLL_INFO);
|
|
||||||
KIRQL OldIrql;
|
KIRQL OldIrql;
|
||||||
UINT i, Signalled = 0;
|
UINT i, Signalled = 0;
|
||||||
ULONG Exclusive = PollReq->Exclusive;
|
ULONG Exclusive = PollReq->Exclusive;
|
||||||
|
@ -223,7 +220,7 @@ AfdSelect( PDEVICE_OBJECT DeviceObject, PIRP Irp,
|
||||||
|
|
||||||
PAFD_ACTIVE_POLL Poll = NULL;
|
PAFD_ACTIVE_POLL Poll = NULL;
|
||||||
|
|
||||||
Poll = ExAllocatePool( NonPagedPool, AllocSize );
|
Poll = ExAllocatePool( NonPagedPool, sizeof(AFD_ACTIVE_POLL) );
|
||||||
|
|
||||||
if (Poll){
|
if (Poll){
|
||||||
Poll->Irp = Irp;
|
Poll->Irp = Irp;
|
||||||
|
|
Loading…
Reference in a new issue