Fix buffer overrun in "dotnet" module. (#1173)

Credits to OSS-Fuzz.
2026-10-12 02:10:00 +00:00 · 2019-12-16 10:27:17 +01:00
parent f50a39051e
commit b534f03eec
2 changed files with 3 additions and 0 deletions
@@ -795,6 +795,9 @@ void dotnet_parse_tilde_2(

            // Now follow the Class index into the TypeRef table.
            typeref_row = typeref_ptr + (typeref_row_size * class_index);
+              
+            if (!fits_in_pe(pe, typeref_row, typeref_row_size))
+              break;

            // Skip over the ResolutionScope and check the Name field,
            // which is an index into the Strings heap.