dplayx: Check REQUESTPLAYERREPLY size before access.

wine-mirror · Oct 7, 2024 · 70a22f5 · 70a22f5
1 parent 6ff9858
commit 70a22f5
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/dlls/dplayx/dplayx_messages.c b/dlls/dplayx/dplayx_messages.c
@@ -274,6 +274,11 @@ HRESULT DP_MSG_SendRequestPlayerId( IDirectPlayImpl *This, DWORD dwFlags, DPID *
   {
     LPCDPMSG_NEWPLAYERIDREPLY lpcReply;
 
+    if ( dwMsgSize < sizeof( DPMSG_NEWPLAYERIDREPLY ) )
+    {
+      free( lpMsg );
+      return DPERR_GENERIC;
+    }
     lpcReply = lpMsg;
 
     *lpdpidAllocatedId = lpcReply->dpidNewPlayerId;