Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-10-02 15:34:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix buffer size checks for IOCTL_VIDEO_SET_COLOR_REGISTERS.

Browse source 
svn path=/trunk/; revision=15829
This commit is contained in:
Filip Navara 2005-06-07 16:26:14 +00:00
parent d06d236296
commit e7f345e0a2
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
reactos/drivers/video/miniport/vbe/vbemp.c
View file

@ -480,7 +480,7 @@ VBEStartIO(
if (RequestPacket->InputBufferLength < sizeof(VIDEO_CLUT) ||
RequestPacket->InputBufferLength <
(((PVIDEO_CLUT)RequestPacket->InputBuffer)->NumEntries * sizeof(ULONG)) +
sizeof(VIDEO_CLUT))
FIELD_OFFSET(VIDEO_CLUT, LookupTable))
{
RequestPacket->StatusBlock->Status = ERROR_INSUFFICIENT_BUFFER;
return TRUE;

2
reactos/drivers/video/miniport/vga/vgamp.c
View file

@ -223,7 +223,7 @@ VGAStartIO(PVOID DeviceExtension,
if (RequestPacket->InputBufferLength < sizeof(VIDEO_CLUT) ||
RequestPacket->InputBufferLength <
(((PVIDEO_CLUT)RequestPacket->InputBuffer)->NumEntries * sizeof(ULONG)) +
sizeof(VIDEO_CLUT))
FIELD_OFFSET(VIDEO_CLUT, LookupTable))
{
RequestPacket->StatusBlock->Status = ERROR_INSUFFICIENT_BUFFER;
return TRUE;