Module: wine
Branch: master
Commit: 6a30cde7b04c3b8a28e93557ce5ce18d1e45931f
URL: http://source.winehq.org/git/wine.git/?a=commit;h=6a30cde7b04c3b8a28e93557c…
Author: Thomas Faber <thomas.faber(a)reactos.org>
Date: Mon Aug 11 10:59:20 2014 +0200
rpcrt4: Correctly check for in-buffer memory in PointerFree.
---
dlls/rpcrt4/ndr_marshall.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/dlls/rpcrt4/ndr_marshall.c b/dlls/rpcrt4/ndr_marshall.c
index 481b426..3f1762a 100644
--- a/dlls/rpcrt4/ndr_marshall.c
+++ b/dlls/rpcrt4/ndr_marshall.c
@@ -1138,7 +1138,7 @@ static void PointerFree(PMIDL_STUB_MESSAGE pStubMsg,
* BufferStart and BufferEnd won't be reset when allocating memory for
* sending the response. we don't have to check for the new buffer here as
* it won't be used a type memory, only for buffer memory */
- if (Pointer >= pStubMsg->BufferStart && Pointer < pStubMsg->BufferEnd)
+ if (Pointer >= pStubMsg->BufferStart && Pointer <= pStubMsg->BufferEnd)
goto notfree;
if (attr & RPC_FC_P_ONSTACK) {