From 8d0e6f5f046e442d5689cccfce40603f2581f196 Mon Sep 17 00:00:00 2001
From: Timo Kreuzer <timo.kreuzer@reactos.org>
Date: Tue, 17 Feb 2009 21:28:22 +0000
Subject: [PATCH] co_IntCallHookProc: Don't dereference the ResultPointer
 returned from KeUserModeCallback and then probe the LRESULT cast to PVOID,
 but probe the ResultPointer. Fixes bug #4114 See issue #4114 for more
 details.

svn path=/trunk/; revision=39654
---
 reactos/subsystems/win32/win32k/ntuser/callback.c | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/reactos/subsystems/win32/win32k/ntuser/callback.c b/reactos/subsystems/win32/win32k/ntuser/callback.c
index fbb8ce30da4..05585952834 100644
--- a/reactos/subsystems/win32/win32k/ntuser/callback.c
+++ b/reactos/subsystems/win32/win32k/ntuser/callback.c
@@ -495,9 +495,7 @@ co_IntCallHookProc(INT HookId,
 
    _SEH2_TRY
    {
-      ProbeForRead((PVOID)*(LRESULT*)ResultPointer,
-                                   sizeof(LRESULT),
-                                                 1);
+      ProbeForRead(ResultPointer, sizeof(LRESULT), 1);
       /* Simulate old behaviour: copy into our local buffer */
       Result = *(LRESULT*)ResultPointer;
    }