msi: Validate the szProduct parameter of MsiConfigureProductEx.

ac976c94 · James Hawkins · Alexandre Julliard · 38106ac2 · ac976c94
Commit ac976c94 authored Jul 28, 2008 by James Hawkins Committed by Alexandre Julliard Jul 29, 2008
Show whitespace changes
Inline Side-by-side

Showing with 3 additions and 0 deletions

msi.c dlls/msi/msi.c +3 -0

No files found.
--- a/dlls/msi/msi.c
+++ b/dlls/msi/msi.c
@@ -357,6 +357,9 @@ UINT WINAPI MsiConfigureProductExW(LPCWSTR szProduct, int iInstallLevel,
    TRACE("%s %d %d %s\n",debugstr_w(szProduct), iInstallLevel, eInstallState,
          debugstr_w(szCommandLine));

+    if (!szProduct || lstrlenW(szProduct) != GUID_SIZE - 1)
+        return ERROR_INVALID_PARAMETER;
+
    if (eInstallState != INSTALLSTATE_LOCAL &&
        eInstallState != INSTALLSTATE_DEFAULT)
    {