mirror/upx
1
0
Fork 0
mirror of https://github.com/upx/upx synced 2025-09-28 19:06:07 +08:00
Code Issues Releases Wiki Activity

Protect against bad crafted input.

Browse Source 
https://github.com/upx/upx/issues/129
	modified:   p_lx_elf.cpp
This commit is contained in:
John Reiser 2017-10-03 09:55:34 -07:00
parent ef336dbcc6
commit 7bace76176
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
src/p_lx_elf.cpp
View File

@ -3572,6 +3572,9 @@ void PackLinuxElf64::unpack(OutputFile *fo)
unsigned total_out = 0; unsigned total_out = 0;
unsigned c_adler = upx_adler32(NULL, 0); unsigned c_adler = upx_adler32(NULL, 0);
unsigned u_adler = upx_adler32(NULL, 0); unsigned u_adler = upx_adler32(NULL, 0);
if ((MAX_ELF_HDR - sizeof(Elf64_Ehdr))/sizeof(Elf64_Phdr) < u_phnum) {
throwCantUnpack("bad compressed e_phnum");
}
// Packed ET_EXE has no PT_DYNAMIC. // Packed ET_EXE has no PT_DYNAMIC.
// Packed ET_DYN has original PT_DYNAMIC for info needed by rtld. // Packed ET_DYN has original PT_DYNAMIC for info needed by rtld.
@ -4196,6 +4199,9 @@ void PackLinuxElf32::unpack(OutputFile *fo)
unsigned total_out = 0; unsigned total_out = 0;
unsigned c_adler = upx_adler32(NULL, 0); unsigned c_adler = upx_adler32(NULL, 0);
unsigned u_adler = upx_adler32(NULL, 0); unsigned u_adler = upx_adler32(NULL, 0);
if ((MAX_ELF_HDR - sizeof(Elf32_Ehdr))/sizeof(Elf32_Phdr) < u_phnum) {
throwCantUnpack("bad compressed e_phnum");
}
// Packed ET_EXE has no PT_DYNAMIC. // Packed ET_EXE has no PT_DYNAMIC.
// Packed ET_DYN has original PT_DYNAMIC for info needed by rtld. // Packed ET_DYN has original PT_DYNAMIC for info needed by rtld.