msxml3: Avoid buffer overflow in BindStatusCallback_GetBindInfo (DPH).

Signed-off-by: Thomas Faber <thomas.faber@reactos.org> Signed-off-by: Nikolay Sivov <nsivov@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

msxml3: Avoid buffer overflow in BindStatusCallback_GetBindInfo (DPH).
a6440390 · Thomas Faber · Alexandre Julliard · ee7756fd · a6440390
Commit a6440390 authored Apr 23, 2018 by Thomas Faber Committed by Alexandre Julliard Apr 24, 2018
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

httprequest.c dlls/msxml3/httprequest.c +1 -1

No files found.
--- a/dlls/msxml3/httprequest.c
+++ b/dlls/msxml3/httprequest.c
@@ -397,7 +397,7 @@ static HRESULT WINAPI BindStatusCallback_GetBindInfo(IBindStatusCallback *iface,
    pbindinfo->dwBindVerb = This->request->verb;
    if (This->request->verb == BINDVERB_CUSTOM)
    {
-        pbindinfo->szCustomVerb = CoTaskMemAlloc(SysStringByteLen(This->request->custom));
+        pbindinfo->szCustomVerb = CoTaskMemAlloc(SysStringByteLen(This->request->custom)+sizeof(WCHAR));
        strcpyW(pbindinfo->szCustomVerb, This->request->custom);
    }