Avoid segfault when detecting decryption buffer size.

ea2fabca · Kees Cook · Alexandre Julliard · dc920056 · ea2fabca
Commit ea2fabca authored May 16, 2005 by Kees Cook Committed by Alexandre Julliard May 16, 2005
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

rsaenh.c dlls/rsaenh/rsaenh.c +1 -1

No files found.
--- a/dlls/rsaenh/rsaenh.c
+++ b/dlls/rsaenh/rsaenh.c
@@ -1834,7 +1834,7 @@ BOOL WINAPI RSAENH_CPEncrypt(HCRYPTPROV hProv, HCRYPTKEY hKey, HCRYPTHASH hHash,
        }

        dwEncryptedLen = (*pdwDataLen/pCryptKey->dwBlockLen+(Final?1:0))*pCryptKey->dwBlockLen;
-        for (i=*pdwDataLen; i<dwEncryptedLen; i++) pbData[i] = dwEncryptedLen - *pdwDataLen;
+        for (i=*pdwDataLen; i<dwEncryptedLen && i<dwBufLen; i++) pbData[i] = dwEncryptedLen - *pdwDataLen;
        *pdwDataLen = dwEncryptedLen; 

        if (*pdwDataLen > dwBufLen)