cabinet: Check buffer size before copying in NONEfdi_decomp.

Check that the data will fit into the fixed sized buffer CAB(outbuf) and return an error if not before copying.

cabinet: Check buffer size before copying in NONEfdi_decomp.
79ad9cbc · Rob Shearman · Alexandre Julliard · 2b5a59c0 · 79ad9cbc
Commit 79ad9cbc authored Oct 01, 2008 by Rob Shearman Committed by Alexandre Julliard Oct 01, 2008
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 0 deletions

fdi.c dlls/cabinet/fdi.c +1 -0

No files found.
--- a/dlls/cabinet/fdi.c
+++ b/dlls/cabinet/fdi.c
@@ -911,6 +911,7 @@ static int LZXfdi_init(int window, fdi_decomp_state *decomp_state) {
 static int NONEfdi_decomp(int inlen, int outlen, fdi_decomp_state *decomp_state)
 {
  if (inlen != outlen) return DECR_ILLEGALDATA;
+  if (outlen > CAB_BLOCKMAX) return DECR_DATAFORMAT;
  memcpy(CAB(outbuf), CAB(inbuf), (size_t) inlen);
  return DECR_OK;
 }