From 45952b56797982d27731b20d97f5648c9414814a Mon Sep 17 00:00:00 2001 From: Günther Deschner Date: Mon, 2 Aug 2010 15:52:09 +0200 Subject: spoolss: fix potential crash bug in spoolss_PrinterEnumValues push path. Guenther --- librpc/idl/spoolss.idl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'librpc') diff --git a/librpc/idl/spoolss.idl b/librpc/idl/spoolss.idl index 028015b696..c61cba511c 100644 --- a/librpc/idl/spoolss.idl +++ b/librpc/idl/spoolss.idl @@ -2855,7 +2855,7 @@ cpp_quote("#define spoolss_security_descriptor security_descriptor") [value(2*strlen_m_term(value_name))] uint32 value_name_len; winreg_Type type; [relative,subcontext(0),subcontext_size(data_length),flag(NDR_REMAINING)] DATA_BLOB *data; - [value(data->length)] uint32 data_length; + [value(data ? data->length : 0)] uint32 data_length; } spoolss_PrinterEnumValues; [public,noopnum,noprint] WERROR _spoolss_EnumPrinterDataEx( -- cgit