Fix last byte in returned match buffer being cut off

rapid7 · Dec 1, 2023 · 3835d5d · 3835d5d
1 parent e588bad
commit 3835d5d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/c/meterpreter/source/extensions/stdapi/server/sys/process/memory.c b/c/meterpreter/source/extensions/stdapi/server/sys/process/memory.c
@@ -655,7 +655,7 @@ DWORD request_sys_process_memory_search(Remote* remote, Packet* packet)
 						const size_t current_match_length = min(max_match_length, match_length);
 
 						// Note: This raw data needs to be read from the buffer we copied. Trying to read it from mem.BaseAddress directly will make us crash.
-						met_api->packet.add_tlv_raw(search_results, TLV_TYPE_MEMORY_SEARCH_MATCH_STR, buffer + current_buffer_offset + result, (DWORD)current_match_length);
+						met_api->packet.add_tlv_raw(search_results, TLV_TYPE_MEMORY_SEARCH_MATCH_STR, buffer + current_buffer_offset + result, (DWORD)current_match_length + 1);
 
 						dprintf("[MEM SEARCH] Adding Match address");
 						met_api->packet.add_tlv_qword(search_results, TLV_TYPE_MEMORY_SEARCH_MATCH_ADDR, match_address);