From d84ab9ec7c513eb0917bc9f24f6dc97b70e8485b Mon Sep 17 00:00:00 2001 From: Pierre Schweitzer Date: Thu, 3 Jan 2019 23:10:31 +0100 Subject: [PATCH] [MOUNTMGR] Fix buffer length checking Found by Vadim Galiant. CORE-15549 --- drivers/filters/mountmgr/device.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/drivers/filters/mountmgr/device.c b/drivers/filters/mountmgr/device.c index 08b386daedb..17d720e346c 100644 --- a/drivers/filters/mountmgr/device.c +++ b/drivers/filters/mountmgr/device.c @@ -265,7 +265,7 @@ MountMgrCreatePoint(IN PDEVICE_EXTENSION DeviceExtension, MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength), (Point->SymbolicLinkNameLength + Point->SymbolicLinkNameOffset)); - if (MaxLength >= Stack->Parameters.DeviceIoControl.InputBufferLength) + if (MaxLength > Stack->Parameters.DeviceIoControl.InputBufferLength) { return STATUS_INVALID_PARAMETER; }