conhost: Validate width param in write_output.

Signed-off-by: Pengpeng Dong <dongpengpeng@uniontech.com> Signed-off-by: Jacek Caban <jacek@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

conhost: Validate width param in write_output.
b9f1ec8c · Pengpeng Dong · Alexandre Julliard · d22e8219 · b9f1ec8c
Commit b9f1ec8c authored Sep 23, 2020 by Pengpeng Dong Committed by Alexandre Julliard Sep 23, 2020
Hide whitespace changes
Inline Side-by-side

Showing with 2 additions and 0 deletions

conhost.c programs/conhost/conhost.c +2 -0

No files found.
--- a/programs/conhost/conhost.c
+++ b/programs/conhost/conhost.c
@@ -1984,6 +1984,8 @@ static NTSTATUS write_output( struct screen_buffer *screen_buffer, const struct 
    char_info_t *dest;
    char *src;

+    if (*out_size == sizeof(SMALL_RECT) && !params->width) return STATUS_INVALID_PARAMETER;
+
    entry_size = params->mode == CHAR_INFO_MODE_TEXTATTR ? sizeof(char_info_t) : sizeof(WCHAR);
    entry_cnt = (in_size - sizeof(*params)) / entry_size;