ApfelTeeSaft/reactos
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/reactos.git synced 2026-08-26 19:33:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

[USBHUB] USBH_FdoQueryBusRelations: Fix an off by one (#9298)

Browse Source 
Fix an out of bounds heap read when compacting the ghost device list.

Change the loop condition from `GhostPort < DeviceRelations->Count` to
`GhostPort < DeviceRelations->Count - 1` so the array shift never reads
past the last valid entry.
This commit is contained in:
Alex Mendoza
2026-07-17 22:48:18 +03:00
committed by GitHub
parent a4c863062f
commit ae50d745ca
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
drivers/usb/usbhub/pnp.c
+1 -1
View File
@@ -1392,7 +1392,7 @@ RelationsWorker:
if (PdoExt(PdoDevice)->EnumFlags & USBHUB_ENUM_FLAG_GHOST_DEVICE)
{
for (GhostPort = Port;
GhostPort < DeviceRelations->Count;
GhostPort < DeviceRelations->Count - 1;
GhostPort++)
{
DeviceRelations->Objects[GhostPort] =