VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-12 02:10:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

bound fat arch count against overflow in macho_parse_fat_file (#2209)

Browse Source
This commit is contained in:
jmestwa-coder
2026-06-24 11:49:43 +02:00
committed by GitHub
parent 1d58245c8e
commit ff983bd822
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
libyara/modules/macho/macho.c
+1 -1
View File
@@ -729,7 +729,7 @@ void macho_parse_fat_file(
uint32_t count = yr_be32toh(header->nfat_arch);
yr_set_integer(count, object, "nfat_arch");
if (size < sizeof(yr_fat_header_t) + count * fat_arch_sz)
if (count > (size - sizeof(yr_fat_header_t)) / fat_arch_sz)
return;
yr_fat_arch_64_t arch;