diff --git a/src/WINNT/afsrdr/kernel/lib/AFSFSControl.cpp b/src/WINNT/afsrdr/kernel/lib/AFSFSControl.cpp index 2354043810..29dc20f8c9 100644 --- a/src/WINNT/afsrdr/kernel/lib/AFSFSControl.cpp +++ b/src/WINNT/afsrdr/kernel/lib/AFSFSControl.cpp @@ -115,7 +115,8 @@ AFSParseMountPointTarget( IN UNICODE_STRING *Target, // If a colon is not found, it means there is no cell - if ( Cell->Buffer[ Cell->Length / sizeof( WCHAR)] == L':') + if ( Cell->Length < Target->Length - sizeof( WCHAR) && + Cell->Buffer[ Cell->Length / sizeof( WCHAR)] == L':') { Cell->MaximumLength = Cell->Length;