Update of /cvsroot/anyedit/AnyEditv2
In directory sc8-pr-cvs11.sourceforge.net:/tmp/cvs-serv12427
Modified Files:
HtmlFile.cpp
Log Message:
Fixed Buffer Overflow Bug in reading HTML Resource.
Index: HtmlFile.cpp
===================================================================
RCS file: /cvsroot/anyedit/AnyEditv2/HtmlFile.cpp,v
retrieving revision 1.2
retrieving revision 1.3
diff -C2 -d -r1.2 -r1.3
*** HtmlFile.cpp 12 Oct 2005 18:55:57 -0000 1.2
--- HtmlFile.cpp 21 Oct 2006 09:19:34 -0000 1.3
***************
*** 233,236 ****
--- 233,238 ----
if (hResource != NULL)
{
+ // Get the size of the resource
+ DWORD dwSize = ::SizeofResource(AfxGetResourceHandle(), hResource);
// Found it, lock and load!
HGLOBAL hGlobal = ::LoadResource(AfxGetResourceHandle(), hResource);
***************
*** 238,242 ****
{
LPVOID lpData = ::LockResource(hGlobal);
! m_sContents = (const char*)lpData;
::UnlockResource(hGlobal);
}
--- 240,244 ----
{
LPVOID lpData = ::LockResource(hGlobal);
! m_sContents = CString((LPTSTR)lpData, dwSize);
::UnlockResource(hGlobal);
}
|