ApfelTeeSaft/reactos
1
0
Fork 0
mirror of https://github.com/ApfelTeeSaft/reactos.git synced 2026-09-02 04:13:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix buffer overflow in KiGetCpuVendor, thanks to Michael Fritscher for reporting this bug.

Browse Source 
svn path=/trunk/; revision=24520
This commit is contained in:
Thomas Bluemel
2006-10-15 12:41:48 +00:00
parent 809d98521c
commit f682bf63e7
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
reactos/ntoskrnl/ke/i386/cpu.c
+4 -3
View File
@@ -183,6 +183,7 @@ KiGetCpuVendor(VOID)
{
PKPRCB Prcb = KeGetCurrentPrcb();
ULONG Vendor[5];
ULONG Temp;
/* Assume no Vendor ID and fail if no CPUID Support. */
Prcb->VendorString[0] = 0;
@@ -193,13 +194,13 @@ KiGetCpuVendor(VOID)
Vendor[4] = 0;
/* Re-arrange vendor string */
Vendor[5] = Vendor[2];
Temp = Vendor[2];
Vendor[2] = Vendor[3];
Vendor[3] = Vendor[5];
Vendor[3] = Temp;
/* Copy it to the PRCB and null-terminate it again */
RtlCopyMemory(Prcb->VendorString,
&Vendor[1],
&Vendor[0],
sizeof(Prcb->VendorString) - sizeof(CHAR));
Prcb->VendorString[sizeof(Prcb->VendorString) - sizeof(CHAR)] = ANSI_NULL;