mountmgr: Fix buffer length check.

Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=49305Signed-off-by: Hans Leidekker <hans@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

mountmgr: Fix buffer length check.
ea9b5073 · Hans Leidekker · Alexandre Julliard · d48fed09 · ea9b5073
Commit ea9b5073 authored Jun 04, 2020 by Hans Leidekker Committed by Alexandre Julliard Jun 04, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

device.c dlls/mountmgr.sys/device.c +1 -1

No files found.
--- a/dlls/mountmgr.sys/device.c
+++ b/dlls/mountmgr.sys/device.c
@@ -1780,7 +1780,7 @@ static void query_property( struct disk_device *device, IRP *irp )
        if (!irp->UserBuffer
            || irpsp->Parameters.DeviceIoControl.OutputBufferLength < sizeof(STORAGE_DESCRIPTOR_HEADER))
            irp->IoStatus.u.Status = STATUS_INVALID_PARAMETER;
-        else if (irpsp->Parameters.DeviceIoControl.OutputBufferLength < sizeof(STORAGE_DEVICE_DESCRIPTOR))
+        else if (irpsp->Parameters.DeviceIoControl.OutputBufferLength < len)
        {
            descriptor = irp->UserBuffer;
            descriptor->Version = sizeof(STORAGE_DEVICE_DESCRIPTOR);