Changeset 41068 in vbox

Timestamp:

Apr 26, 2012 11:39:29 AM (12 years ago)

Author:

vboxsync

Message:

SUPDrv.c: Fixed read beyond allocation in supdrvIOCtl_LdrOpen. Kudos to Vitali for finding it.

File:

• trunk/src/VBox/HostDrivers/Support/SUPDrv.c (modified) (1 diff)

trunk/src/VBox/HostDrivers/Support/SUPDrv.c

@@ -3892 +3892 @@
      * Allocate memory.
      */
-    pv = RTMemAlloc(RT_OFFSETOF(SUPDRVLDRIMAGE, szName[cchName + 1]));
+    Assert(cchName < sizeof(pImage->szName));
+    pv = RTMemAlloc(sizeof(SUPDRVLDRIMAGE));
     if (!pv)
     {