The "if" was triggered because ValueInformation->DataLength is 0xcdcdcdcd at the return of the function
svn path=/trunk/; revision=18442
*ResultLength = ValueInformation->DataLength;
ZwClose(KeyHandle);
- if (ValueInformation->DataLength > BufferLength)
- Status = STATUS_BUFFER_TOO_SMALL;
-
if (!NT_SUCCESS(Status))
{
ExFreePool(ValueInformation);
return Status;
}
+ if (ValueInformation->DataLength > BufferLength)
+ {
+ ExFreePool(ValueInformation);
+ return STATUS_BUFFER_TOO_SMALL;
+ }
+
/* FIXME: Verify the value (NULL-terminated, correct format). */
RtlCopyMemory(PropertyBuffer, ValueInformation->Data,