Rob Shearman : rpcrt4: Fix crash calculation of tower size in rpcrt4_ncalrpc_get_top_of_tower.

[Alexandre Julliard]

Module: wine
Branch: master
Commit: 54e904e780e7c6c6b05f818932f684d4f0d46750
URL:    http://source.winehq.org/git/wine.git/?a=commit;h=54e904e780e7c6c6b05f818932...

Author: Rob Shearman 
Date:   Sun Aug 10 18:23:31 2008 +0100

rpcrt4: Fix crash calculation of tower size in rpcrt4_ncalrpc_get_top_of_tower.

The size depends on the length of the endpoint string, not the network
address string.

---

dlls/rpcrt4/rpc_transport.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/rpcrt4/rpc_transport.c b/dlls/rpcrt4/rpc_transport.c
index 86c4e4f..6e57ee7 100644
--- a/dlls/rpcrt4/rpc_transport.c
+++ b/dlls/rpcrt4/rpc_transport.c
@@ -677,7 +677,7 @@ static size_t rpcrt4_ncalrpc_get_top_of_tower(unsigned char *tower_data,

TRACE("(%p, %s, %s)\n", tower_data, networkaddr, endpoint);

-    endpoint_size = strlen(networkaddr) + 1;
+    endpoint_size = strlen(endpoint) + 1;
     size = sizeof(*pipe_floor) + endpoint_size;

if (!tower_data)