From a88ef86ce39d31cae704e9c6f50b7f0bb3585b14 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=9D=8E=E9=80=9A=E6=B4=B2?= Date: Tue, 4 Aug 2026 21:15:34 +0800 Subject: [PATCH] InitSystem (Windows): fixes logic of assertions --- src/detection/initsystem/initsystem_windows.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/detection/initsystem/initsystem_windows.c b/src/detection/initsystem/initsystem_windows.c index 4b4e64772..f41a66cfa 100644 --- a/src/detection/initsystem/initsystem_windows.c +++ b/src/detection/initsystem/initsystem_windows.c @@ -17,7 +17,7 @@ const char* ffDetectInitSystem(FFInitSystemResult* result) { } for (SYSTEM_PROCESS_INFORMATION* ptr = buffer; ; ptr = (SYSTEM_PROCESS_INFORMATION*) ((uint8_t*) ptr + ptr->NextEntryOffset)) { - assert(ptr >= buffer && (uint8_t*) ptr < (uint8_t*) buffer + size); + assert(ptr >= buffer && (uint8_t*) ptr < (uint8_t*) buffer + sizeof(buffer)); uint16_t len = ptr->ImageName.Length / sizeof(*ptr->ImageName.Buffer); if (ptr->InheritedFromUniqueProcessId == (HANDLE)(uintptr_t) 4 /* System */ && len > 4 && _wcsnicmp(ptr->ImageName.Buffer + len - 4, L".exe", 4) == 0) { // smss.exe