Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-09-28 21:44:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

[NTOS:IO] Fix IRP stack location check in IoForwardIrpSynchronously

Browse source 
We are doing IoCallDriver here, so the valid stack location should be
CurrentLocation <= Irp->StackCount (just a check for a completly incorrect value)
&& CurrentLocation > 1 (ensure that we have a place for another call)

CORE-17189

Co-authored-by: Thomas Faber <thomas.faber@reactos.org>
This commit is contained in:
Victor Perevertkin 2020-09-07 04:57:17 +03:00
parent 8fa3c147b6
commit f562f9c5c6
No known key found for this signature in database
GPG key ID: C750B7222E9C7830
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
ntoskrnl/io/iomgr/irp.c
View file

@ -1629,7 +1629,7 @@ IoForwardIrpSynchronously(IN PDEVICE_OBJECT DeviceObject,
NTSTATUS Status;
/* Check if next stack location is available */
if (Irp->CurrentLocation < Irp->StackCount)
if (Irp->CurrentLocation > Irp->StackCount || Irp->CurrentLocation <= 1)
{
/* No more stack location */
return FALSE;