Francois Gouget : wineusb.sys: Fix a potential buffer overflow in add_usb_device().
Module: wine Branch: master Commit: 9fe40c9f58412f210c1eb453f87b9fa871403183 URL: https://source.winehq.org/git/wine.git/?a=commit;h=9fe40c9f58412f210c1eb453f... Author: Francois Gouget <fgouget(a)free.fr> Date: Sun Aug 22 18:19:35 2021 +0200 wineusb.sys: Fix a potential buffer overflow in add_usb_device(). name needs to be able to hold 15 characters plus an unsigned int, potentially up to 10 characters even if it is unlikely, plus the trailing nul character. Signed-off-by: Francois Gouget <fgouget(a)free.fr> Signed-off-by: Alexandre Julliard <julliard(a)winehq.org> --- dlls/wineusb.sys/wineusb.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dlls/wineusb.sys/wineusb.c b/dlls/wineusb.sys/wineusb.c index 441ed338f1e..085acf77e6f 100644 --- a/dlls/wineusb.sys/wineusb.c +++ b/dlls/wineusb.sys/wineusb.c @@ -94,7 +94,7 @@ static void add_usb_device(libusb_device *libusb_device) DEVICE_OBJECT *device_obj; UNICODE_STRING string; NTSTATUS status; - WCHAR name[20]; + WCHAR name[26]; int ret; libusb_get_device_descriptor(libusb_device, &device_desc);
participants (1)
-
Alexandre Julliard