mirror of
https://github.com/reactos/reactos.git
synced 2025-08-02 20:36:26 +00:00
[KS]
- dont access pin descriptor beyond size - found with special pool svn path=/trunk/; revision=66401
This commit is contained in:
parent
167a0c4414
commit
68f04beae4
1 changed files with 7 additions and 5 deletions
|
@ -350,6 +350,13 @@ KspPinPropertyHandler(
|
||||||
return STATUS_INVALID_PARAMETER;
|
return STATUS_INVALID_PARAMETER;
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
(*(PULONG)Buffer) = DescriptorsCount;
|
||||||
|
Irp->IoStatus.Information = sizeof(ULONG);
|
||||||
|
return STATUS_SUCCESS;
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
if (DescriptorSize == sizeof(KSPIN_DESCRIPTOR))
|
if (DescriptorSize == sizeof(KSPIN_DESCRIPTOR))
|
||||||
{
|
{
|
||||||
|
@ -364,11 +371,6 @@ KspPinPropertyHandler(
|
||||||
|
|
||||||
switch(Property->Id)
|
switch(Property->Id)
|
||||||
{
|
{
|
||||||
case KSPROPERTY_PIN_CTYPES:
|
|
||||||
(*(PULONG)Buffer) = DescriptorsCount;
|
|
||||||
Irp->IoStatus.Information = sizeof(ULONG);
|
|
||||||
Status = STATUS_SUCCESS;
|
|
||||||
break;
|
|
||||||
case KSPROPERTY_PIN_DATAFLOW:
|
case KSPROPERTY_PIN_DATAFLOW:
|
||||||
|
|
||||||
Size = sizeof(KSPIN_DATAFLOW);
|
Size = sizeof(KSPIN_DATAFLOW);
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue