From: Pierre Schweitzer <pierre@reactos.org>
Date: Thu, 4 Apr 2019 13:08:21 +0000 (+0200)
Subject: [UDFS] Fix an integer overflow leading to a buffer overrun
X-Git-Tag: 0.4.13-dev~67
X-Git-Url: https://git.reactos.org/?p=reactos.git;a=commitdiff_plain;h=2a104321ee1f212bc2eb0a9616b5a453df835ccc

[UDFS] Fix an integer overflow leading to a buffer overrun

Spotted by GCC7
---

diff --git a/drivers/filesystems/udfs/Include/mem_tools.h b/drivers/filesystems/udfs/Include/mem_tools.h
index 7dfc8ed4824..11d92544dbc 100644
--- a/drivers/filesystems/udfs/Include/mem_tools.h
+++ b/drivers/filesystems/udfs/Include/mem_tools.h
@@ -265,7 +265,7 @@ ULONG inline MyReallocPool__(PCHAR addr, ULONG len, PCHAR *pnewaddr, ULONG newle
             RtlCopyMemory(newaddr, addr, newlen);
         } else {
             RtlCopyMemory(newaddr, addr, len);
-            RtlZeroMemory(newaddr+len, newlen - len);
+            RtlZeroMemory(newaddr+len, _newlen - len);
         }
 #ifdef MY_MEM_BOUNDS_CHECK
         for(i=0; i<MY_HEAP_ALIGN+1; i++) {