summaryrefslogtreecommitdiff
path: root/windows
diff options
context:
space:
mode:
authorJoseph Henry <[email protected]>2020-09-23 15:31:20 -0700
committerJoseph Henry <[email protected]>2020-09-23 15:31:20 -0700
commitb3331c5ec2eea2c4396bf528c95df366dcbb7c3d (patch)
tree50b98ac9b7bb6c9474e8a8c3c9c10cd14d980e57 /windows
parentff23d3051ff3bfe540bce3c4a117fd27b9dc6c07 (diff)
Fix buffer overflow in windows tap driver
Diffstat (limited to 'windows')
-rw-r--r--windows/TapDriver6/adapter.c3
1 files changed, 2 insertions, 1 deletions
diff --git a/windows/TapDriver6/adapter.c b/windows/TapDriver6/adapter.c
index 7ce4b310..c170e221 100644
--- a/windows/TapDriver6/adapter.c
+++ b/windows/TapDriver6/adapter.c
@@ -272,7 +272,8 @@ tapReadConfiguration(
if (status == NDIS_STATUS_SUCCESS)
{
- if (configParameter->ParameterType == NdisParameterString)
+ if (configParameter->ParameterType == NdisParameterString
+ && configParameter->ParameterData.StringData.Length <= sizeof(Adapter->NetCfgInstanceIdBuffer) - sizeof(WCHAR))
{
DEBUGP (("[TAP] NdisReadConfiguration (NetCfgInstanceId=%wZ)\n",
&configParameter->ParameterData.StringData ));