mirror of
https://github.com/reactos/reactos.git
synced 2024-07-10 06:35:06 +00:00
[NTOS]
Fix buffer overrun in ExFreePoolWithTag when dealing with a PoolType other than NonPagedPool and PagedPool. Spotted by Amine Khaldi. svn path=/trunk/; revision=45134
This commit is contained in:
parent
29193e1051
commit
b90d243037
|
@ -520,7 +520,7 @@ ExFreePoolWithTag(IN PVOID P,
|
||||||
// for this pool type
|
// for this pool type
|
||||||
//
|
//
|
||||||
BlockSize = Entry->BlockSize;
|
BlockSize = Entry->BlockSize;
|
||||||
PoolType = (Entry->PoolType & 3) - 1;
|
PoolType = (Entry->PoolType - 1) & BASE_POOL_TYPE_MASK;
|
||||||
PoolDesc = PoolVector[PoolType];
|
PoolDesc = PoolVector[PoolType];
|
||||||
|
|
||||||
//
|
//
|
||||||
|
|
Loading…
Reference in a new issue