portugalfuturista/rizin
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix librz/bin/format/pe/pe_section.c:236:27

Browse source 
signed integer overflow due type 'int'
This commit is contained in:
wargio 2024-09-08 11:12:32 +08:00 committed by Giovanni
parent 526946f552
commit 7c84abc23d
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
librz/bin/format/pe/pe_section.c
View file

@ -232,7 +232,10 @@ struct rz_bin_pe_section_t *PE_(rz_bin_pe_get_sections)(RzBinPEObj *bin) {
sec_name[PE_IMAGE_SIZEOF_SHORT_NAME] = '\0';
int idx = atoi(sec_name + 1);
ut64 sym_tbl_off = bin->nt_headers->file_header.PointerToSymbolTable;
int num_symbols = bin->nt_headers->file_header.NumberOfSymbols;
st64 num_symbols = bin->nt_headers->file_header.NumberOfSymbols;
if (ST32_MUL_OVFCHK(num_symbols, COFF_SYMBOL_SIZE)) {
continue;
}
st64 off = num_symbols * COFF_SYMBOL_SIZE;
if (off > 0 && sym_tbl_off &&
sym_tbl_off + off + idx < bin->size &&