RpcCommon/Misc.c GetUnloadedLocationInfo, out of range buffer access

[hfiref0x]

RpcCommon\Misc.c

RpcView/RpcCommon/Misc.c

Line 222 in c108da2

memcpy(pLocationInfo->Location, pUnloadEventTrace->ImageName, sizeof(pLocationInfo->Location));

where

memcpy destination

RpcView/RpcCommon/Misc.h

Line 27 in c108da2

WCHAR Location[MAX_PATH];

memcpy source

RpcView/RpcCommon/Misc.c

Line 178 in c108da2

WCHAR ImageName[32]; // Image name

memcpy number of bytes to copy = sizeof(pLocationInfo->Location) is 520 bytes.

The 520 bytes copied from source may lead to crash if memory beyond this array is not available.

Split from #17

Edit:
By the way, I can't find where this routine used.