lywsvip/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2026-06-02 17:31:23 +08:00
Code Issues Packages Projects Releases Wiki Activity

[NTUSER] IntTrackPopupMenuEx: Check TPMPARAMS.cbSize (#8092)

Browse Source 
Validate structure size.
JIRA issue: CORE-3247
- In IntTrackPopupMenuEx function,
  if lpTpm was non-NULL, then
  validate lpTpm->cbSize.
- If validation failed, then set last
  error and return FALSE.
This commit is contained in:
Katayama Hirofumi MZ
2025-06-06 22:37:27 +09:00
committed by GitHub
parent 6dd04063ba
commit 5b4d1dbd4b
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
win32ss/user/ntuser/menu.c
View File

@@ -4580,6 +4580,13 @@ BOOL WINAPI IntTrackPopupMenuEx( PMENU menu, UINT wFlags, int x, int y,
BOOL ret = FALSE;
PTHREADINFO pti = PsGetCurrentThreadWin32Thread();
if (lpTpm && lpTpm->cbSize != sizeof(*lpTpm))
{
ERR("Invalid TPMPARAMS size: got %u, expected %zu\n", lpTpm->cbSize, sizeof(*lpTpm));
EngSetLastError(ERROR_INVALID_PARAMETER);
return FALSE;
}
if (pti != pWnd->head.pti)
{
ERR("Must be the same pti!\n");