[PATCH 5/5] dplayx: Check REQUESTPLAYERREPLY size before access.

[Anton Baskanov]

From: Anton Baskanov

---
 dlls/dplayx/dplayx_messages.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/dlls/dplayx/dplayx_messages.c b/dlls/dplayx/dplayx_messages.c
index 04e0fc06d5b..4ecee05d79e 100644
--- a/dlls/dplayx/dplayx_messages.c
+++ b/dlls/dplayx/dplayx_messages.c
@@ -274,6 +274,11 @@ HRESULT DP_MSG_SendRequestPlayerId( IDirectPlayImpl *This, DWORD dwFlags, DPID *
   {
     LPCDPMSG_NEWPLAYERIDREPLY lpcReply;

+    if ( dwMsgSize < sizeof( DPMSG_NEWPLAYERIDREPLY ) )
+    {
+      free( lpMsg );
+      return DPERR_GENERIC;
+    }
     lpcReply = lpMsg;

*lpdpidAllocatedId = lpcReply->dpidNewPlayerId;