reg: Abort 'add' operation when parsing command-line arguments that are not switches.

Signed-off-by: Hugh McMaster <hugh.mcmaster@outlook.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

reg: Abort 'add' operation when parsing command-line arguments that are not switches.
b2ead1ff · Hugh McMaster · Alexandre Julliard · dc57a265 · b2ead1ff
Commit b2ead1ff authored Apr 02, 2021 by Hugh McMaster Committed by Alexandre Julliard Apr 02, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 38 additions and 36 deletions

add.c programs/reg/add.c +38 -36

No files found.
--- a/programs/reg/add.c
+++ b/programs/reg/add.c
@@ -222,46 +222,48 @@ int reg_add(int argc, WCHAR *argvW[])
    for (i = 3; i < argc; i++)
    {
-        if (argvW[i][0] == '/' || argvW[i][0] == '-')
+        WCHAR *str;
+        if (argvW[i][0] != '/' && argvW[i][0] != '-')
+            goto invalid;
+        str = &argvW[i][1];
+        if (!lstrcmpiW(str, L"ve"))
        {
-            WCHAR *str = &argvW[i][1];
+            if (value_empty) goto invalid;
+            value_empty = TRUE;
+            continue;
+        }
+        else if (!str[0] || str[1])
+            goto invalid;
-            if (!lstrcmpiW(str, L"ve"))
+        switch (towlower(*str))
-            {
+        {
-                if (value_empty) goto invalid;
+        case 'v':
-                value_empty = TRUE;
+            if (value_name || !(value_name = argvW[++i]))
-                continue;
-            }
-            else if (!str[0] || str[1])
                goto invalid;
+            break;
-            switch (towlower(*str))
+        case 't':
-            {
+            if (type || !(type = argvW[++i]))
-            case 'v':
-                if (value_name || !(value_name = argvW[++i]))
-                    goto invalid;
-                break;
-            case 't':
-                if (type || !(type = argvW[++i]))
-                    goto invalid;
-                break;
-            case 'd':
-                if (data || !(data = argvW[++i]))
-                    goto invalid;
-                break;
-            case 's':
-                str = argvW[++i];
-                if (separator || !str || lstrlenW(str) != 1)
-                    goto invalid;
-                separator = str[0];
-                break;
-            case 'f':
-                if (force) goto invalid;
-                force = TRUE;
-                break;
-            default:
                goto invalid;
-            }
+            break;
+        case 'd':
+            if (data || !(data = argvW[++i]))
+                goto invalid;
+            break;
+        case 's':
+            str = argvW[++i];
+            if (separator || !str || lstrlenW(str) != 1)
+                goto invalid;
+            separator = str[0];
+            break;
+        case 'f':
+            if (force) goto invalid;
+            force = TRUE;
+            break;
+        default:
+            goto invalid;
        }
    }