| commit | 719cd82f3584dd6a863f0b7d2fca429e24d3bdca | |
| author | Rob Shearman <rob@codeweavers.com> | |
| Mon, 18 Feb 2008 19:37:35 +0000 (18 19:37 +0000) | ||
| committer | Alexandre Julliard <julliard@winehq.org> | |
| Tue, 19 Feb 2008 12:39:24 +0000 (19 13:39 +0100) | ||
| tree | fcdacfd695633e883473c2e09cf132f1a1497f09 | treesnapshot (tar.gz zip) |
| parent | 39dce046583196c4734b1279593ea9d13cc7dbf8 | commitdiff |
wininet: Fix potential buffer overrun in HttpQueryInfoA.
If HTTP_QUERY_CUSTOM is specified then the buffer contains a
null-terminated string on input and data of length len on output. The
code wasn't taking into account that the input len could be less than
the length of the string and thus could result in the allocated buffer
being overrun with the call to WideCharToMultiByte.
If HTTP_QUERY_CUSTOM is specified then the buffer contains a
null-terminated string on input and data of length len on output. The
code wasn't taking into account that the input len could be less than
the length of the string and thus could result in the allocated buffer
being overrun with the call to WideCharToMultiByte.
| dlls/wininet/http.c | diffblobblamehistory |