mirror/upx
1
0
Fork 0
mirror of https://github.com/upx/upx synced 2025-09-28 19:06:07 +08:00
Code Issues Releases Wiki Activity

Better checking for malformed input

Browse Source 
https://github.com/upx/upx/issues
	modified:   p_vmlinx.cpp
This commit is contained in:
John Reiser 2019-07-21 10:48:50 -07:00
parent 276b748aa6
commit 58b122d97d
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/p_vmlinx.cpp
View File

@ -111,9 +111,11 @@ typename T::Shdr const *PackVmlinuxBase<T>::getElfSections()
int j; int j;
for (p = shdri, j= ehdri.e_shnum; --j>=0; ++p) { for (p = shdri, j= ehdri.e_shnum; --j>=0; ++p) {
if (Shdr::SHT_STRTAB==p->sh_type if (Shdr::SHT_STRTAB==p->sh_type
&& (p->sh_size + p->sh_offset) <= (unsigned long)file_size && p->sh_offset < (unsigned long)file_size
&& p->sh_name < p->sh_size && p->sh_size <= ((unsigned long)file_size - p->sh_offset)
&& (10+ p->sh_name) <= p->sh_size // 1+ strlen(".shstrtab") && p->sh_name < (unsigned long)file_size
&& 10 <= ((unsigned long)file_size - p->sh_name)
// 10 == (1+ strlen(".shstrtab"))
) { ) {
delete [] shstrtab; delete [] shstrtab;
shstrtab = new char[1+ p->sh_size]; shstrtab = new char[1+ p->sh_size];