secur32: Validate the context handle in schan_InitializeSecurityContextW().

Signed-off-by: Hans Leidekker <hans@codeweavers.com> Signed-off-by: Alexandre Julliard <julliard@winehq.org>

secur32: Validate the context handle in schan_InitializeSecurityContextW().
c1993458 · Hans Leidekker · Alexandre Julliard · 96185c7e · c1993458
Commit c1993458 authored Oct 28, 2021 by Hans Leidekker Committed by Alexandre Julliard Oct 29, 2021
Hide whitespace changes
Inline Side-by-side

Showing with 1 addition and 1 deletion

schannel.c dlls/secur32/schannel.c +1 -1

No files found.
--- a/dlls/secur32/schannel.c
+++ b/dlls/secur32/schannel.c
@@ -984,7 +984,7 @@ static SECURITY_STATUS SEC_ENTRY schan_InitializeSecurityContextW(
        SIZE_T record_size = 0;
        unsigned char *ptr;

-        ctx = schan_get_object(phContext->dwLower, SCHAN_HANDLE_CTX);
+        if (!(ctx = schan_get_object(phContext->dwLower, SCHAN_HANDLE_CTX))) return SEC_E_INVALID_HANDLE;
        if (pInput)
        {
            idx = schan_find_sec_buffer_idx(pInput, 0, SECBUFFER_TOKEN);