Robert Shearman : rpcrt4: Fix an off-by-one error when checking the size of the buffer in NdrInterfacePointerMarshall .

[Alexandre Julliard]

Module: wine
Branch: refs/heads/master
Commit: 9b3cecaeb55471eaf9aa57ee644ccfec6b16d947
URL:    http://source.winehq.org/git/?p=wine.git;a=commit;h=9b3cecaeb55471eaf9aa57ee...

Author: Robert Shearman 
Date:   Thu May 18 03:40:29 2006 +0100

rpcrt4: Fix an off-by-one error when checking the size of the buffer in NdrInterfacePointerMarshall.

---

dlls/rpcrt4/ndr_ole.c |    2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diff --git a/dlls/rpcrt4/ndr_ole.c b/dlls/rpcrt4/ndr_ole.c
index ba0404f..e84bda6 100644
--- a/dlls/rpcrt4/ndr_ole.c
+++ b/dlls/rpcrt4/ndr_ole.c
@@ -254,7 +254,7 @@ unsigned char * WINAPI NdrInterfacePoint
   TRACE("(%p,%p,%p)\n", pStubMsg, pMemory, pFormat);
   pStubMsg->MaxCount = 0;
   if (!LoadCOM()) return NULL;
-  if (pStubMsg->Buffer + sizeof(DWORD) < (unsigned char *)pStubMsg->RpcMsg->Buffer + pStubMsg->BufferLength) {
+  if (pStubMsg->Buffer + sizeof(DWORD) <= (unsigned char *)pStubMsg->RpcMsg->Buffer + pStubMsg->BufferLength) {
     stream = RpcStream_Create(pStubMsg, TRUE);
     if (stream) {
       if (pMemory)