mirrors/reactos
0
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-11-23 11:33:31 +08:00
Code Issues Packages Projects Releases Wiki Activity

[IMM32] Don't allow invalid 'IME File' values

Browse Source 
Improve security. CORE-11700
This commit is contained in:
Katayama Hirofumi MZ 2022-09-16 17:35:05 +09:00
parent 87f2950e1a
commit db00a75227
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
dll/win32/imm32/utils.c
View File

@ -908,7 +908,8 @@ UINT APIENTRY Imm32GetImeLayout(PREG_IME pLayouts, UINT cLayouts)
RegCloseKey(hkeyIME);
if (!szImeFileName[0])
/* We don't allow the invalid "IME File" values for security reason */
if (!szImeFileName[0] || wcschr(szImeFileName, L'\\') != NULL)
break;
Imm32StrToUInt(szImeKey, &Value, 16);