kernel32: Limit the environment variable size to 32767 in GetEnvironmentVariable.

515b8beb · Bruno Jesus · Alexandre Julliard · b6d0df6a · 515b8beb
Commit 515b8beb authored May 30, 2014 by Bruno Jesus Committed by Alexandre Julliard Jun 12, 2014
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

environ.c dlls/kernel32/environ.c +2 -0

No files found.
--- a/dlls/kernel32/environ.c
+++ b/dlls/kernel32/environ.c
@@ -176,6 +176,8 @@ DWORD WINAPI GetEnvironmentVariableA( LPCSTR name, LPSTR value, DWORD size )
        return 0;
    }

+    /* limit the size to sane values */
+    size = min(size, 32767);
    if (!(valueW = HeapAlloc(GetProcessHeap(), 0, size * sizeof(WCHAR))))
        return 0;