Dmitry Timoshkov : rpcrt4: Fix the buffer bounds check.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 12d3905427796fd65f21673b77381442339ca00f
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=12d3905427796fd65f21673b77...

Author: Dmitry Timoshkov <dmitry(a)codeweavers.com>
Date:   Thu Jul 19 14:56:18 2007 +0900

rpcrt4: Fix the buffer bounds check.

---

 dlls/rpcrt4/ndr_marshall.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/rpcrt4/ndr_marshall.c b/dlls/rpcrt4/ndr_marshall.c
index 26a55b1..b1b8fa3 100644
--- a/dlls/rpcrt4/ndr_marshall.c
+++ b/dlls/rpcrt4/ndr_marshall.c
@@ -759,7 +759,7 @@ unsigned char *WINAPI NdrConformantStringUnmarshall( PMIDL_STUB_MESSAGE pStubMsg
 
   /* verify the buffer is safe to access */
   if ((pStubMsg->Buffer + bufsize < pStubMsg->Buffer) ||
-      (pStubMsg->Buffer + bufsize < pStubMsg->BufferEnd))
+      (pStubMsg->Buffer + bufsize > pStubMsg->BufferEnd))
   {
     ERR("bufsize 0x%x exceeded buffer end %p of buffer %p\n", bufsize,
         pStubMsg->BufferEnd, pStubMsg->Buffer);