From 4c3cf58fe7d0a1e439868b0515554a9df9efba16 Mon Sep 17 00:00:00 2001 From: Bill Zissimopoulos Date: Tue, 13 Oct 2026 16:15:38 +0300 Subject: [PATCH] sys: FspFsvolQueryStreamInformationCopy: fix vulnerability reported by Johan von Konow --- src/sys/fileinfo.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/sys/fileinfo.c b/src/sys/fileinfo.c index 7a9eea00..7224a785 100644 --- a/src/sys/fileinfo.c +++ b/src/sys/fileinfo.c @@ -635,7 +635,7 @@ static NTSTATUS FspFsvolQueryStreamInformationCopy( {\ PWSTR StreamName = Info->StreamName;\ ULONG Length[3];\ - Length[0] = 0 < CopyLength ? sizeof(WCHAR) : 0;\ + Length[0] = sizeof(WCHAR) <= CopyLength ? sizeof(WCHAR) : CopyLength;\ Length[1] = Info->StreamNameLength - STREAM_EXTRA_LENGTH < CopyLength - Length[0] ?\ Info->StreamNameLength - STREAM_EXTRA_LENGTH : CopyLength - Length[0];\ Length[2] = CopyLength - Length[0] - Length[1];\