[CVE-2017-11792] Partially initialized data in chakra JIT leads to OO…

…B read/write in RPC - Internal
chakra-core · Oct 10, 2017 · 4e319aa · 4e319aa
1 parent 775ed51
commit 4e319aa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/JITClient/JITManager.cpp b/lib/JITClient/JITManager.cpp
@@ -13,7 +13,7 @@ void * __RPC_USER midl_user_allocate(
 #endif
     size_t size)
 {
-    return (HeapAlloc(GetProcessHeap(), 0, size));
+    return (HeapAlloc(GetProcessHeap(), HEAP_ZERO_MEMORY, size));
 }
 
 void __RPC_USER midl_user_free(_Pre_maybenull_ _Post_invalid_ void * ptr)