[IPHLPAPI] Fix broken size computation leading to buffer overrun
authorPierre Schweitzer <pierre@reactos.org>
Tue, 27 Nov 2018 21:57:30 +0000 (22:57 +0100)
committerPierre Schweitzer <pierre@reactos.org>
Tue, 27 Nov 2018 22:12:57 +0000 (23:12 +0100)
dll/win32/iphlpapi/ipstats_reactos.c

index f26c43a..84351ea 100644 (file)
@@ -1015,7 +1015,7 @@ PMIB_TCPTABLE_OWNER_MODULE getOwnerModTcpTable(void)
 
     IpOwnerModTcpTable = HeapAlloc
        ( GetProcessHeap(), 0,
-         sizeof(DWORD) + (sizeof(PMIB_TCPROW_OWNER_MODULE) * totalNumber) );
+         sizeof(DWORD) + (sizeof(MIB_TCPROW_OWNER_MODULE) * totalNumber) );
     if (!IpOwnerModTcpTable) {
         closeTcpFile(tcpFile);
         return NULL;
@@ -1034,7 +1034,7 @@ PMIB_TCPTABLE_OWNER_MODULE getOwnerModTcpTable(void)
                                        CO_TL_ENTITY,
                                        entitySet[i].tei_instance,
                                        0,
-                                       sizeof(PMIB_TCPROW_OWNER_MODULE),
+                                       sizeof(MIB_TCPROW_OWNER_MODULE),
                                        (PVOID *)&AdapterOwnerModTcpTable,
                                        &returnSize );