nhyatt/osslsigncode
1
0
Fork 0
mirror of https://github.com/mtrojnar/osslsigncode.git synced 2025-04-05 09:08:04 -05:00
Code Issues Projects Releases Wiki Activity

Check pagesize upper bound, CID 1519382

Browse Source
This commit is contained in:
olszomal 2023-01-23 14:10:15 +01:00 committed by Michał Trojnara
parent 29843ccf40
commit 08113a08cb
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
osslsigncode.c
View File

@ -1587,9 +1587,11 @@ static u_char *pe_calc_page_hash(char *indata, uint32_t header_size,
} }
/* SectionAlignment is the alignment (in bytes) of sections when they are /* SectionAlignment is the alignment (in bytes) of sections when they are
* loaded into memory. It must be greater than or equal to FileAlignment. * loaded into memory. It must be greater than or equal to FileAlignment.
* The default is the page size for the architecture. */ * The default is the page size for the architecture.
* The large page size is at most 4 MB.
* https://devblogs.microsoft.com/oldnewthing/20210510-00/?p=105200 */
pagesize = GET_UINT32_LE(indata + header_size + 56); pagesize = GET_UINT32_LE(indata + header_size + 56);
if (pagesize < alignment || pagesize > UINT32_MAX) { if (pagesize < alignment || pagesize > 4194304) {
printf("Corrupted page size: 0x%08X\n", pagesize); printf("Corrupted page size: 0x%08X\n", pagesize);
return NULL; /* FAILED */ return NULL; /* FAILED */
} }