| commit | 719cd82f3584dd6a863f0b7d2fca429e24d3bdca | [log] [tgz] |
|---|---|---|
| author | Rob Shearman <rob@codeweavers.com> | Mon Feb 18 19:37:35 2008 +0000 |
| committer | Alexandre Julliard <julliard@winehq.org> | Tue Feb 19 13:39:24 2008 +0100 |
| tree | fcdacfd695633e883473c2e09cf132f1a1497f09 | |
| parent | 39dce046583196c4734b1279593ea9d13cc7dbf8 [diff] |
wininet: Fix potential buffer overrun in HttpQueryInfoA. If HTTP_QUERY_CUSTOM is specified then the buffer contains a null-terminated string on input and data of length len on output. The code wasn't taking into account that the input len could be less than the length of the string and thus could result in the allocated buffer being overrun with the call to WideCharToMultiByte.