morgan/FreeRDP
1
0
Fork 0
mirror of https://github.com/morgan9e/FreeRDP synced 2026-04-14 08:24:16 +09:00
Code Issues Packages Projects Releases Wiki Activity

[core,gateway] fix string reading for TSG

Browse Source 
The MaxCount field might be bigger than what is actually encoded, so
only read the ActualCount elements from the stream.
This commit is contained in:
akallabeth
2025-04-09 22:21:37 +02:00
parent 6f16a093b5
commit 3890c98c84
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
libfreerdp/core/gateway/tsg.c
View File

@@ -445,9 +445,9 @@ static BOOL tsg_ndr_read_string(wLog* log, wStream* s, WCHAR** str, UINT32 lengt
if (str)
*str = Stream_PointerAs(s, WCHAR);
if (!Stream_CheckAndLogRequiredLengthWLog(log, s, MaxCount))
if (!Stream_CheckAndLogRequiredLengthWLog(log, s, ActualCount * sizeof(WCHAR)))
return FALSE;
Stream_Seek(s, MaxCount);
Stream_Seek(s, ActualCount * sizeof(WCHAR));
return TRUE;
}