From: Leon W. <moo...@us...> - 2006-10-21 09:19:37
|
Update of /cvsroot/anyedit/AnyEditv2 In directory sc8-pr-cvs11.sourceforge.net:/tmp/cvs-serv12427 Modified Files: HtmlFile.cpp Log Message: Fixed Buffer Overflow Bug in reading HTML Resource. Index: HtmlFile.cpp =================================================================== RCS file: /cvsroot/anyedit/AnyEditv2/HtmlFile.cpp,v retrieving revision 1.2 retrieving revision 1.3 diff -C2 -d -r1.2 -r1.3 *** HtmlFile.cpp 12 Oct 2005 18:55:57 -0000 1.2 --- HtmlFile.cpp 21 Oct 2006 09:19:34 -0000 1.3 *************** *** 233,236 **** --- 233,238 ---- if (hResource != NULL) { + // Get the size of the resource + DWORD dwSize = ::SizeofResource(AfxGetResourceHandle(), hResource); // Found it, lock and load! HGLOBAL hGlobal = ::LoadResource(AfxGetResourceHandle(), hResource); *************** *** 238,242 **** { LPVOID lpData = ::LockResource(hGlobal); ! m_sContents = (const char*)lpData; ::UnlockResource(hGlobal); } --- 240,244 ---- { LPVOID lpData = ::LockResource(hGlobal); ! m_sContents = CString((LPTSTR)lpData, dwSize); ::UnlockResource(hGlobal); } |