d3d10: Validate the data size in parse_fx10() (AFL).

Signed-off-by: Henri Verbeet <hverbeet@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

d3d10: Validate the data size in parse_fx10() (AFL).
e36630f7 · Henri Verbeet · Alexandre Julliard · 1f38359e · e36630f7
Commit e36630f7 authored May 26, 2016 by Henri Verbeet Committed by Alexandre Julliard May 27, 2016
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

effect.c dlls/d3d10/effect.c +6 -0

No files found.
--- a/dlls/d3d10/effect.c
+++ b/dlls/d3d10/effect.c
@@ -2180,6 +2180,12 @@ static HRESULT parse_fx10(struct d3d10_effect *e, const char *data, DWORD data_s
    const char *ptr = data;
    DWORD unknown;

+    if (!require_space(0, 19, sizeof(DWORD), data_size))
+    {
+        WARN("Invalid data size %#x.\n", data_size);
+        return E_INVALIDARG;
+    }
+
    /* Compiled target version (e.g. fx_4_0=0xfeff1001, fx_4_1=0xfeff1011). */
    read_dword(&ptr, &e->version);
    TRACE("Target: %#x\n", e->version);