[PATCH 5/6] dplayx: Check the message size before access.

[Anton Baskanov]

From: Anton Baskanov <baskanov(a)gmail.com>

---
 dlls/dplayx/dplaysp.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/dlls/dplayx/dplaysp.c b/dlls/dplayx/dplaysp.c
index fa6ea871495..535e7fa85c2 100644
--- a/dlls/dplayx/dplaysp.c
+++ b/dlls/dplayx/dplaysp.c
@@ -219,6 +219,9 @@ static HRESULT WINAPI IDirectPlaySPImpl_HandleMessage( IDirectPlaySP *iface, voi
   FIXME( "(%p)->(%p,0x%08lx,%p): mostly stub\n",
          This, lpMessageBody, dwMessageBodySize, lpMessageHeader );
 
+  if ( dwMessageBodySize < sizeof( DPMSG_SENDENVELOPE ) )
+    return DPERR_GENERIC;
+
   wCommandId = lpMsg->wCommandId;
   wVersion   = lpMsg->wVersion;
 
-- 
GitLab


https://gitlab.winehq.org/wine/wine/-/merge_requests/6534