Merge pull request #2735 from akallabeth/clipboard_temp_file_name_conversion_fix

[Clipboard] Fixed out of bound array access.
This commit is contained in:
Bernhard Miklautz 2015-06-26 12:49:42 +02:00
commit 54c4dd6264

View File

@ -458,7 +458,7 @@ int cliprdr_temp_directory(CliprdrClientContext* context, CLIPRDR_TEMP_DIRECTORY
if (length > 520)
length = 520;
Stream_Write(s, tempDirectory->szTempDir, length * 2);
Stream_Write(s, wszTempDir, length * 2);
Stream_Zero(s, (520 - length) * 2);
free(wszTempDir);