In flat tree reading, check for (negative) string offsets which underrun
the input blob. (Patch from Michael Ellerman).main
parent
7f6d12b3a1
commit
4ddf7c020c
|
@ -547,7 +547,7 @@ static char *flat_read_stringtable(struct inbuf *inb, int offset)
|
|||
|
||||
p = inb->base + offset;
|
||||
while (1) {
|
||||
if (p >= inb->limit)
|
||||
if (p >= inb->limit || p < inb->base)
|
||||
die("String offset %d overruns string table\n",
|
||||
offset);
|
||||
|
||||
|
|
Loading…
Reference in New Issue