diff --git a/src/fs/ntapi_tt_open_physical_parent_directory.c b/src/fs/ntapi_tt_open_physical_parent_directory.c index 1efbee9..77b8605 100644 --- a/src/fs/ntapi_tt_open_physical_parent_directory.c +++ b/src/fs/ntapi_tt_open_physical_parent_directory.c @@ -26,6 +26,7 @@ int32_t __stdcall __ntapi_tt_open_physical_parent_directory( wchar16_t * root; nt_unicode_string * path; uint32_t len; + int mup; (void)reserved; @@ -48,24 +49,46 @@ int32_t __stdcall __ntapi_tt_open_physical_parent_directory( wch = path->buffer + (path->strlen / sizeof(uint16_t)); - if ((root[0] != '\\') + if ((wch < &root[8]) + || (root[0] != '\\') || (root[1] != 'D') || (root[2] != 'e') || (root[3] != 'v') || (root[4] != 'i') || (root[5] != 'c') || (root[6] != 'e') || (root[7] != '\\')) return NT_STATUS_INTERNAL_ERROR; - for (root=&root[8]; (root &root[11]) + && (root[8]=='M') + && (root[9]=='u') + && (root[10]=='p') + && (root[11]=='\\'); + + root = mup ? &root[12] : &root[8]; + + for (; (rootbuffer) * sizeof(uint16_t)) == path->strlen) + if (root == wch) + return NT_STATUS_INTERNAL_ERROR; + + if (mup) + for (root++; (rootroot) && (wch[-1]!='\\'); ) + for (root++; (wch>=root) && (wch[-1]!='\\'); ) wch--; - path->strlen = sizeof(uint16_t) * (uint16_t)(wch-path->buffer); + path->strlen = (uint16_t)(wch - path->buffer) * sizeof(uint16_t); path->maxlen = 0; /* oa */