mirror of
https://github.com/ApfelTeeSaft/reactos.git
synced 2026-09-02 12:23:31 +00:00
[WIN32K]
Protect access to the result pointer from KeUserModeCallback with SEH. Fixes a possible kernel mode crash. svn path=/trunk/; revision=48437
This commit is contained in:
@@ -267,7 +267,16 @@ co_IntLoadSysMenuTemplate()
|
||||
if (NT_SUCCESS(Status))
|
||||
{
|
||||
/* Simulate old behaviour: copy into our local buffer */
|
||||
Result = *(LRESULT*)ResultPointer;
|
||||
_SEH2_TRY
|
||||
{
|
||||
ProbeForRead(ResultPointer, sizeof(LRESULT), 1);
|
||||
Result = *(LRESULT*)ResultPointer;
|
||||
}
|
||||
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
||||
{
|
||||
Result = 0;
|
||||
}
|
||||
_SEH2_END
|
||||
}
|
||||
|
||||
UserEnterCo();
|
||||
|
||||
Reference in New Issue
Block a user