Skip to content
Snippets Groups Projects
Unverified Commit 3ecdf899 authored by Richard Cordovano's avatar Richard Cordovano Committed by GitHub
Browse files

Merge pull request #1715 from sleuthkit/3512_heap_read_segv_1111

3512 Sanity check update offset.
parents dfc10e3d 5f9a3f89
No related branches found
No related tags found
No related merge requests found
...@@ -664,7 +664,16 @@ ntfs_fix_idxrec(NTFS_INFO * ntfs, ntfs_idxrec * idxrec, uint32_t len) ...@@ -664,7 +664,16 @@ ntfs_fix_idxrec(NTFS_INFO * ntfs, ntfs_idxrec * idxrec, uint32_t len)
tsk_error_reset(); tsk_error_reset();
tsk_error_set_errno(TSK_ERR_FS_INODE_COR); tsk_error_set_errno(TSK_ERR_FS_INODE_COR);
tsk_error_set_errstr tsk_error_set_errstr
("fix_idxrec: More Update Sequence Entries than idx record size"); ("ntfs_fix_idxrec: More Update Sequence Entries than idx record size");
return 1;
}
uint16_t upd_off = tsk_getu16(fs->endian, idxrec->upd_off);
if (upd_off > len || sizeof(ntfs_upd) > (len - upd_off)) {
tsk_error_reset();
tsk_error_set_errno(TSK_ERR_FS_INODE_COR);
tsk_error_set_errstr
("ntfs_fix_idxrec: Corrupt idx record");
return 1; return 1;
} }
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment