fix possible integer overflow in MEW related code

git-svn: trunk@3376
18 years ago · 50d244022a
parent 2c4071f90a
commit 50d244022a
2 changed files with 6 additions and 0 deletions
--- a/5
+++ b/5
@ -1,3 +1,8 @@
+Thu Dec  6 15:22:27 CET 2007 (tk)
+---------------------------------
+  * libclamav/pe.c: fix possible integer overflow in MEW related code
+		    Reported by iDefense [IDEF2842]
+
 Thu Dec  6 15:19:53 CET 2007 (tk)
 ---------------------------------
  * libclamav/sis.c: fix error path descriptor leak (bb#704)
--- a/libclamav/pe.c
+++ b/libclamav/pe.c
@ -1116,6 +1116,7 @@ int cli_scanpe(int desc, cli_ctx *ctx)

 	    cli_dbgmsg("MEW: ssize %08x dsize %08x offdiff: %08x\n", ssize, dsize, offdiff);

+	    CLI_UNPSIZELIMITS("MEW", MAX(ssize, dsize));
 	    CLI_UNPSIZELIMITS("MEW", MAX(ssize + dsize, exe_sections[i + 1].rsz));

 	    /* allocate needed buffer */