https://bugs.winehq.org/show_bug.cgi?id=56154
Bug ID: 56154 Summary: Potential nullpointer dereference in wow64_NtQueryInformationToken (Coverity) Product: Wine Version: 9.0-rc3 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: dark.shadow4@web.de Distribution: ---
In wow64_NtQueryInformationToken we have the following code:
dacl32->DefaultDacl = dacl->DefaultDacl ? PtrToUlong( dacl32 + 1 ) : 0; memcpy( dacl32 + 1, dacl->DefaultDacl, ret_size - sizeof(*dacl) );
I think memcpy might actually work will nullpointers, although it doesn't seem right.
Coverity link: https://scan5.scan.coverity.com/reports.htm#v60945/p10088/fileInstanceId=257...