Public/winfsp
1
0
Fork 0
mirror of https://github.com/winfsp/winfsp.git synced 2026-07-29 07:49:24 -05:00
Code Activity

sys: FspVolumeNotifyWork: fix vulnerability reported by Wencheng Xue (GitHub @panwnvda)

Browse Source 
Correct bounds checking on FSP_FSCTL_NOTIFY_INFO records.
This commit is contained in:
Bill Zissimopoulos
2026-07-27 16:16:41 +03:00
parent e3ecc89bb7
commit 1916d9bf06
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/sys/volume.c
+2
View File
@@ -1523,6 +1523,8 @@ static VOID FspVolumeNotifyWork(PVOID NotifyWorkItem0)
Unlock = TRUE; Unlock = TRUE;
break; break;
} }
if ((SIZE_T)(NotifyInfoEnd - (PUINT8)NotifyInfo) < NotifyInfoSize)
break;
FileName.Length = FileName.Length =
FileName.MaximumLength = (USHORT)(NotifyInfoSize - sizeof(FSP_FSCTL_NOTIFY_INFO)); FileName.MaximumLength = (USHORT)(NotifyInfoSize - sizeof(FSP_FSCTL_NOTIFY_INFO));