Author: mjansen Date: Wed Jun 1 19:37:25 2016 New Revision: 71489 URL: http://svn.reactos.org/svn/reactos?rev=71489&view=rev Log: [APPHELP] Fix a possible out of bounds write.
Modified: trunk/reactos/dll/appcompat/apphelp/sdbwrite.c Modified: trunk/reactos/dll/appcompat/apphelp/sdbwrite.c URL: http://svn.reactos.org/svn/reactos/trunk/reactos/dll/appcompat/apphelp/sdbwrite.c?rev=71489&r1=71488&r2=71489&view=diff ============================================================================== --- trunk/reactos/dll/appcompat/apphelp/sdbwrite.c [iso-8859-1] (original) +++ trunk/reactos/dll/appcompat/apphelp/sdbwrite.c [iso-8859-1] Wed Jun 1 19:37:25 2016 @@ -272,13 +272,14 @@ TAGID WINAPI SdbBeginWriteListTag(PDB db, TAG tag) { TAGID list_id; + DWORD dum = 0; if (!SdbpCheckTagType(tag, TAG_TYPE_LIST)) return TAGID_NULL; list_id = db->write_iter; SdbpWrite(db, &tag, sizeof(TAG)); - db->write_iter += sizeof(DWORD); /* reserve some memory for storing list size */ + SdbpWrite(db, &dum, sizeof(dum)); /* reserve some memory for storing list size */ return list_id; }