marko10_000
/
wine-wine
forked from Mirrors/wine-wine
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

hidclass.sys: Fix memory leak in call_minidriver. 

Before 5400210376, the output buffer
was released because UserIosb != NULL.

Signed-off-by: Sebastian Lackner <sebastian@fds-team.de>
Signed-off-by: Aric Stewart <aric@codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard@winehq.org>
oldstable
Sebastian Lackner 2016-10-26 21:53:20 +02:00 committed by Alexandre Julliard
parent 9581f4c15a
commit b70dd1aa86
1 changed files with 1 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
dlls/hidclass.sys/main.c
View File

@ -98,18 +98,10 @@ NTSTATUS call_minidriver(ULONG code, DEVICE_OBJECT *device, void *in_buff, ULONG
IRP *irp;
IO_STATUS_BLOCK irp_status;
NTSTATUS status;
void *buffer = NULL;
HANDLE event = CreateEventA(NULL, FALSE, FALSE, NULL);
if (out_size)
{
buffer = HeapAlloc(GetProcessHeap(), 0, out_size);
memcpy(buffer, out_buff, out_size);
}
irp = IoBuildDeviceIoControlRequest(code, device, in_buff, in_size,
buffer, out_size, TRUE, NULL, &irp_status);
out_buff, out_size, TRUE, NULL, &irp_status);
IoSetCompletionRoutine(irp, internalComplete, event, TRUE, TRUE, TRUE);
status = IoCallDriver(device, irp);
@ -117,7 +109,6 @@ NTSTATUS call_minidriver(ULONG code, DEVICE_OBJECT *device, void *in_buff, ULONG
if (status == STATUS_PENDING)
WaitForSingleObject(event, INFINITE);
memcpy(out_buff, buffer, out_size);
status = irp->IoStatus.u.Status;
IoCompleteRequest(irp, IO_NO_INCREMENT );