From 7d73a8c6e859f9e56cca295af8d8984a1c8397d8 Mon Sep 17 00:00:00 2001
From: Cameron Gutman <aicommander@gmail.com>
Date: Sat, 4 Apr 2009 00:41:42 +0000
Subject: [PATCH]  - Validate the buffer size before copying to it

svn path=/trunk/; revision=40358
---
 reactos/lib/drivers/ip/transport/datagram/datagram.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/reactos/lib/drivers/ip/transport/datagram/datagram.c b/reactos/lib/drivers/ip/transport/datagram/datagram.c
index 303b755d86e..6a7bd36ec43 100644
--- a/reactos/lib/drivers/ip/transport/datagram/datagram.c
+++ b/reactos/lib/drivers/ip/transport/datagram/datagram.c
@@ -126,6 +126,12 @@ VOID DGDeliverData(
                        ("Target Buffer: %x, Source Buffer: %x, Size %d\n",
                         Current->Buffer, DataBuffer, DataSize));
 
+          if (DataSize > Current->BufferSize)
+          {
+              Current->Complete(Current->Context, STATUS_BUFFER_TOO_SMALL, DataSize);
+              return;
+          }
+
           /* Copy the data into buffer provided by the user */
 	  RtlCopyMemory( Current->Buffer,
 			 DataBuffer,