Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-08-03 13:45:50 +00:00
Code Issues Projects Releases Packages Wiki Activity

[IMM32] Don't allow invalid 'IME File' values

Browse source 
Improve security. CORE-11700
This commit is contained in:
Katayama Hirofumi MZ 2022-09-16 17:35:05 +09:00
parent 87f2950e1a
commit db00a75227
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
dll/win32/imm32/utils.c
View file

@ -908,7 +908,8 @@ UINT APIENTRY Imm32GetImeLayout(PREG_IME pLayouts, UINT cLayouts)
RegCloseKey(hkeyIME); RegCloseKey(hkeyIME);
if (!szImeFileName[0]) /* We don't allow the invalid "IME File" values for security reason */
if (!szImeFileName[0] || wcschr(szImeFileName, L'\\') != NULL)
break; break;
Imm32StrToUInt(szImeKey, &Value, 16); Imm32StrToUInt(szImeKey, &Value, 16);