Skip to content

Commit 2016b57

Browse files
committed
added tt_entries sanity check to mmcmp
1 parent 30ef205 commit 2016b57

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

src/mmcmp.cpp

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -206,6 +206,8 @@ BOOL MMCMP_Unpack(LPCBYTE *ppMemFile, LPDWORD pdwMemLength)
206206

207207
if (!pblk->unpk_size || !pblk->pk_size || !pblk->sub_blk)
208208
goto err;
209+
if (pblk->pk_size <= pblk->tt_entries)
210+
goto err;
209211
if (dwMemPos + 20 + pblk->sub_blk*8 >= dwMemLength)
210212
goto err;
211213

@@ -539,6 +541,7 @@ BOOL PP20_Unpack(LPCBYTE *ppMemFile, LPDWORD pdwMemLength)
539541
free(pBuffer);
540542
return FALSE;
541543
}
544+
542545
*ppMemFile = pBuffer;
543546
*pdwMemLength = dwDstLen;
544547
return TRUE;

0 commit comments

Comments
 (0)