commit 984dfa7eed5a2c4673a5cc108f6bad1401e83440
author Kristján Valur Jónsson <kristjan@ccpgames.com> Mon Apr 02 15:23:29 2012 +0000
committer Kristján Valur Jónsson <kristjan@ccpgames.com> Mon Apr 02 15:23:29 2012 +0000
tree f03bd023e56252c8428e013855c2ea9062edfdb9
parent e900096dc42cd0d590752e00ba3983b4672da806

Issue #14471: Fix a possible buffer overrun in the winreg module.

PC/winreg.c

diff --git a/PC/winreg.c b/PC/winreg.c
index 1bc47b9..240ca69 100644
--- a/PC/winreg.c
+++ b/PC/winreg.c
@@ -1110,7 +1110,7 @@
      * nul.  RegEnumKeyEx requires a 257 character buffer to
      * retrieve such a key name. */
     wchar_t tmpbuf[257];
-    DWORD len = sizeof(tmpbuf); /* includes NULL terminator */
+    DWORD len = sizeof(tmpbuf)/sizeof(wchar_t); /* includes NULL terminator */
 
     if (!PyArg_ParseTuple(args, "Oi:EnumKey", &obKey, &index))
         return NULL;