[ADVAPI32]

- Fix buffer overflow in LookupAccountSidA
See issue #6752 for more details.

svn path=/trunk/; revision=55678
This commit is contained in:
Thomas Faber 2012-02-18 12:00:50 +00:00
parent e5f337a82b
commit c73d3138d4

View file

@ -808,7 +808,7 @@ LookupAccountSidA(LPCSTR lpSystemName,
/* allocate buffers for the unicode strings to receive */
if (dwName > 0)
{
NameBuffer = (PWSTR)LocalAlloc(LMEM_FIXED, dwName);
NameBuffer = LocalAlloc(LMEM_FIXED, dwName * sizeof(WCHAR));
if (NameBuffer == NULL)
{
SetLastError(ERROR_OUTOFMEMORY);
@ -820,7 +820,7 @@ LookupAccountSidA(LPCSTR lpSystemName,
if (dwReferencedDomainName > 0)
{
ReferencedDomainNameBuffer = (PWSTR)LocalAlloc(LMEM_FIXED, dwReferencedDomainName);
ReferencedDomainNameBuffer = LocalAlloc(LMEM_FIXED, dwReferencedDomainName * sizeof(WCHAR));
if (ReferencedDomainNameBuffer == NULL)
{
if (dwName > 0)