[MOUNTMGR] Fix buffer length checking

Found by Vadim Galiant.

CORE-15549

diff --git a/drivers/filters/mountmgr/device.c b/drivers/filters/mountmgr/device.c
index 08b386d..17d720e 100644 (file)
--- a/drivers/filters/mountmgr/device.c
+++ b/drivers/filters/mountmgr/device.c
@@ -265,7 +265,7 @@ MountMgrCreatePoint(IN PDEVICE_EXTENSION DeviceExtension,
 
     MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength),
                     (Point->SymbolicLinkNameLength + Point->SymbolicLinkNameOffset));
 
     MaxLength = MAX((Point->DeviceNameOffset + Point->DeviceNameLength),
                     (Point->SymbolicLinkNameLength + Point->SymbolicLinkNameOffset));

-    if (MaxLength >= Stack->Parameters.DeviceIoControl.InputBufferLength)
+    if (MaxLength > Stack->Parameters.DeviceIoControl.InputBufferLength)

     {
         return STATUS_INVALID_PARAMETER;
     }
     {
         return STATUS_INVALID_PARAMETER;
     }