Details
-
Bug
-
Resolution: Fixed
-
Major
-
None
-
May 2016
Description
ACPI has the following code snippet:
index = 0;
|
index += swprintf(&temp[index],
|
L"ACPI\\%hs",
|
Device->pnp.hardware_id);
|
index++;
|
|
|
index += swprintf(&temp[index],
|
L"*%hs",
|
Device->pnp.hardware_id);
|
index++;
|
temp[++index] = UNICODE_NULL;
|
Using ++index in the last line moves the null one further than intended, and temp[index-1] will be left uninitialized