Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-07-15 08:56:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix buffer overflow in KiGetCpuVendor, thanks to Michael Fritscher for reporting this bug.

Browse source 
svn path=/trunk/; revision=24520
This commit is contained in:
Thomas Bluemel 2006-10-15 12:41:48 +00:00
parent 809d98521c
commit f682bf63e7
1 changed files with 4 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
reactos/ntoskrnl/ke/i386/cpu.c
View file

@ -183,6 +183,7 @@ KiGetCpuVendor(VOID)
{
PKPRCB Prcb = KeGetCurrentPrcb();
ULONG Vendor[5];
ULONG Temp;
/* Assume no Vendor ID and fail if no CPUID Support. */
Prcb->VendorString[0] = 0;
@ -193,13 +194,13 @@ KiGetCpuVendor(VOID)
Vendor[4] = 0;
/* Re-arrange vendor string */
Vendor[5] = Vendor[2];
Temp = Vendor[2];
Vendor[2] = Vendor[3];
Vendor[3] = Vendor[5];
Vendor[3] = Temp;
/* Copy it to the PRCB and null-terminate it again */
RtlCopyMemory(Prcb->VendorString,
&Vendor[1],
&Vendor[0],
sizeof(Prcb->VendorString) - sizeof(CHAR));
Prcb->VendorString[sizeof(Prcb->VendorString) - sizeof(CHAR)] = ANSI_NULL;