msvcrt: Fix buffer overflow in _write function.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=49770Signed-off-by: Piotr Caban <piotr@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

msvcrt: Fix buffer overflow in _write function.
427e2bb6 · Piotr Caban · Alexandre Julliard · ff1a4e06 · 427e2bb6
Commit 427e2bb6 authored Sep 15, 2020 by Piotr Caban Committed by Alexandre Julliard Sep 15, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

file.c dlls/msvcrt/file.c +2 -1

No files found.
--- a/dlls/msvcrt/file.c
+++ b/dlls/msvcrt/file.c
@@ -3504,7 +3504,8 @@ int CDECL MSVCRT__write(int fd, const void* buf, unsigned int count)
            }
 #endif
-            for (;  i < count && j < sizeof(conv)-1; i++, j++, len++)
+            for (; i < count && j < sizeof(conv)-1 &&
+                    len < (sizeof(lfbuf) - 1) / sizeof(WCHAR); i++, j++, len++)
            {
                if (MSVCRT_isleadbyte((unsigned char)s[i]))
                {