VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-12 02:10:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Additional elf parsing check to avoid integer overflow. (#2131)

Browse Source
This commit is contained in:
Shane Huntley
2025-01-13 10:12:24 +01:00
committed by GitHub
parent d3eae3258a
commit 5ff67fca5b
1 changed files with 15 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libyara/modules/elf/elf.c
+15 -11
View File
@@ -791,20 +791,24 @@ static const char* str_table_entry(
\
if (yr_##bo##32toh(segment->type) == ELF_PT_DYNAMIC) \
{ \
elf##bits##_dyn_t* dyn = \
(elf##bits##_dyn_t*) (elf_raw + yr_##bo##bits##toh(segment->offset)); \
\
for (j = 0; IS_VALID_PTR(elf, elf_size, dyn); dyn++, j++) \
j = 0; \
if (yr_##bo##bits##toh(segment->offset) < elf_size) \
{ \
yr_set_integer( \
yr_##bo##bits##toh(dyn->tag), elf_obj, "dynamic[%i].type", j); \
yr_set_integer( \
yr_##bo##bits##toh(dyn->val), elf_obj, "dynamic[%i].val", j); \
elf##bits##_dyn_t* dyn = \
(elf##bits##_dyn_t*) (elf_raw + yr_##bo##bits##toh(segment->offset)); \
\
if (dyn->tag == ELF_DT_NULL) \
for (j = 0; IS_VALID_PTR(elf, elf_size, dyn); dyn++, j++) \
{ \
j++; \
break; \
yr_set_integer( \
yr_##bo##bits##toh(dyn->tag), elf_obj, "dynamic[%i].type", j); \
yr_set_integer( \
yr_##bo##bits##toh(dyn->val), elf_obj, "dynamic[%i].val", j); \
\
if (dyn->tag == ELF_DT_NULL) \
{ \
j++; \
break; \
} \
} \
} \
yr_set_integer(j, elf_obj, "dynamic_section_entries"); \