Blame SOURCES/Fixed-missing-stream-length-check-in-drive_file_quer.patch
|
 |
1069f6 |
From 80b2483373c00baec3a26b1d82027f16dfdd8859 Mon Sep 17 00:00:00 2001
|
|
|
1069f6 |
From: akallabeth <akallabeth@posteo.net>
|
|
|
1069f6 |
Date: Mon, 24 Oct 2022 08:45:05 +0200
|
|
|
1069f6 |
Subject: [PATCH] Fixed missing stream length check in
|
|
|
1069f6 |
drive_file_query_directory
|
|
|
1069f6 |
|
|
|
1069f6 |
(cherry picked from commit 4e4bb79795d6ac85473fb7a83e53ccf63d204b93)
|
|
|
1069f6 |
---
|
|
|
1069f6 |
channels/drive/client/drive_main.c | 3 +++
|
|
|
1069f6 |
1 file changed, 3 insertions(+)
|
|
|
1069f6 |
|
|
|
1069f6 |
diff --git a/channels/drive/client/drive_main.c b/channels/drive/client/drive_main.c
|
|
|
1069f6 |
index d3776381c..b6cf2ad32 100644
|
|
|
1069f6 |
--- a/channels/drive/client/drive_main.c
|
|
|
1069f6 |
+++ b/channels/drive/client/drive_main.c
|
|
|
1069f6 |
@@ -629,6 +629,9 @@ static UINT drive_process_irp_query_directory(DRIVE_DEVICE* drive, IRP* irp)
|
|
|
1069f6 |
Stream_Read_UINT32(irp->input, PathLength);
|
|
|
1069f6 |
Stream_Seek(irp->input, 23); /* Padding */
|
|
|
1069f6 |
path = (WCHAR*)Stream_Pointer(irp->input);
|
|
|
1069f6 |
+ if (!Stream_CheckAndLogRequiredLength(TAG, irp->input, PathLength))
|
|
|
1069f6 |
+ return ERROR_INVALID_DATA;
|
|
|
1069f6 |
+
|
|
|
1069f6 |
file = drive_get_file_by_id(drive, irp->FileId);
|
|
|
1069f6 |
|
|
|
1069f6 |
if (file == NULL)
|
|
|
1069f6 |
--
|
|
|
1069f6 |
2.37.1
|
|
|
1069f6 |
|