[PATCH 1/1] advapi32: Avoid buffer underrun in split_domain_account (ASan).

[Bernhard Übelacker]

From: Bernhard Übelacker <bernhardu(a)mailbox.org>

---
 dlls/advapi32/security.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dlls/advapi32/security.c b/dlls/advapi32/security.c
index fe6ba62d228..b7cb25c5007 100644
--- a/dlls/advapi32/security.c
+++ b/dlls/advapi32/security.c
@@ -1210,7 +1210,7 @@ static void split_domain_account( const LSA_UNICODE_STRING *str, LSA_UNICODE_STR
 
     while (p > str->Buffer && *p != '\\') p--;
 
-    if (*p == '\\')
+    if (p >= str->Buffer && *p == '\\')
     {
         domain->Buffer = str->Buffer;
         domain->Length = (p - str->Buffer) * sizeof(WCHAR);
-- 
GitLab

https://gitlab.winehq.org/wine/wine/-/merge_requests/7574