Magic-Mirror/radare2
1
0
Fork 0
mirror of https://github.com/radareorg/radare2.git synced 2024-11-27 15:10:53 +00:00
Code Issues Actions 6 Packages Projects Releases Wiki Activity

Fix oobread in /ck for search/tire ##search

Browse Source
This commit is contained in:
pancake 2024-08-17 20:08:59 +02:00 committed by pancake
parent 9f803c2fbd
commit b3b7cc0650
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
libr/search/tire.c
View File

@ -1,4 +1,5 @@
/* radare - LGPL - Copyright 2022 bemodtwz */
/* radare - LGPL - Copyright 2022-2024 bemodtwz */
#include <r_search.h>
#include "search.h"
@ -157,11 +158,16 @@ R_IPI int search_tire(RSearch *srch, ut64 from, ut64 to) {
int hits = 0;
while (true) {
ut8 *finger; // point at next possible match
for (finger = buf; finger < buf + (blen - maxkey); finger++) {
ut8 *finger_end = buf + (blen - maxkey);
for (finger = buf; finger < finger_end; finger++) {
RTireNode *node = root[*finger];
ut8 *b = finger + 1; // matching substrings of finger as you walk tire
while (node) {
size_t remaining = finger_end - finger;
if (node->len >= remaining) {
break;
}
if (!memcmp (node->data, b, node->len)) {
// matches and it has a kw
if (node->kw) {