1 Oct
2025
1 Oct
'25
12:24 p.m.
Although dst is a SOCKETADDR_INET *, the object it points to might be smaller than a full SOCKETADDR_INET. One such example is GetBestInterface -> GetBestInterfaceEx -> GetBestRoute2, where a socketaddr_in * (16 bytes) is casted to SOCKETADDR_INET * (28 bytes). This means reading an full SOCKETADDR_INET out of dst could read out-of-bound. Found by ASan. -- https://gitlab.winehq.org/wine/wine/-/merge_requests/9085