Public/winfsp
1
0
Fork 0
mirror of https://github.com/winfsp/winfsp.git synced 2026-07-29 07:49:24 -05:00
Code Activity

sys: FspFsvolQueryStreamInformationCopy: fix vulnerability reported by Abhinav Agarwal (GitHub @abhinavagarwal07)

Browse Source 
Correct bounds checking on FSP_FSCTL_STREAM_INFO records.
This commit is contained in:
Bill Zissimopoulos
2026-07-27 16:19:10 +03:00
parent 1916d9bf06
commit a744d6f24c
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/sys/fileinfo.c
+2 -1
View File
@@ -669,7 +669,8 @@ static NTSTATUS FspFsvolQueryStreamInformationCopy(
{ {
StreamInfoSize = StreamInfo->Size; StreamInfoSize = StreamInfo->Size;
if (sizeof(FSP_FSCTL_STREAM_INFO) > StreamInfoSize) if (sizeof(FSP_FSCTL_STREAM_INFO) > StreamInfoSize ||
(SIZE_T)(StreamInfoEnd - (PUINT8)StreamInfo) < StreamInfoSize)
break; break;
StreamNameLength = StreamInfoSize - sizeof(FSP_FSCTL_STREAM_INFO) + STREAM_EXTRA_LENGTH; StreamNameLength = StreamInfoSize - sizeof(FSP_FSCTL_STREAM_INFO) + STREAM_EXTRA_LENGTH;