mirror of
https://github.com/ApfelTeeSaft/reactos.git
synced 2026-08-27 19:25:36 +00:00
[IMM32] Don't allow invalid 'IME File' values
Improve security. CORE-11700
This commit is contained in:
@@ -908,7 +908,8 @@ UINT APIENTRY Imm32GetImeLayout(PREG_IME pLayouts, UINT cLayouts)
|
|||||||
|
|
||||||
RegCloseKey(hkeyIME);
|
RegCloseKey(hkeyIME);
|
||||||
|
|
||||||
if (!szImeFileName[0])
|
/* We don't allow the invalid "IME File" values for security reason */
|
||||||
|
if (!szImeFileName[0] || wcschr(szImeFileName, L'\\') != NULL)
|
||||||
break;
|
break;
|
||||||
|
|
||||||
Imm32StrToUInt(szImeKey, &Value, 16);
|
Imm32StrToUInt(szImeKey, &Value, 16);
|
||||||
|
|||||||
Reference in New Issue
Block a user