ApfelTeeSaft/reactos
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/reactos.git synced 2026-08-31 19:26:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

Should've done this a long time ago. Just noticed that we're potentially

Browse Source 
sending a bunch of 0 handles into AfdSelect.

svn path=/trunk/; revision=35553
This commit is contained in:
Art Yerkes
2008-08-23 09:01:29 +00:00
parent c0e1bccba7
commit 30108cfd31
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reactos/dll/win32/msafd/misc/dllmain.c
+6 -4
View File
@@ -15,8 +15,8 @@
#include <debug.h>
#ifdef DBG
//DWORD DebugTraceLevel = DEBUG_ULTRA;
DWORD DebugTraceLevel = 0;
DWORD DebugTraceLevel = DEBUG_ULTRA;
//DWORD DebugTraceLevel = 0;
#endif /* DBG */
HANDLE GlobalHeap;
@@ -598,7 +598,7 @@ WSPSelect(
IO_STATUS_BLOCK IOSB;
PAFD_POLL_INFO PollInfo;
NTSTATUS Status;
ULONG HandleCount, OutCount = 0;
LONG HandleCount, OutCount = 0;
ULONG PollBufferSize;
PVOID PollBuffer;
ULONG i, j = 0, x;
@@ -661,7 +661,6 @@ WSPSelect(
RtlZeroMemory( PollInfo, PollBufferSize );
/* Number of handles for AFD to Check */
PollInfo->HandleCount = HandleCount;
PollInfo->Exclusive = FALSE;
PollInfo->Timeout = Timeout;
@@ -689,6 +688,9 @@ WSPSelect(
}
}
PollInfo->HandleCount = j;
PollBufferSize = ((PCHAR)&PollInfo->Handles[j+1]) - ((PCHAR)PollInfo);
/* Send IOCTL */
Status = NtDeviceIoControlFile( (HANDLE)PollInfo->Handles[0].Handle,
SockEvent,