luisgulo/testdisk
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

PhotoRec: avoid potential out of bound read access when renaming damaged .lzh files

Browse source
This commit is contained in:
Christophe Grenier 2016-06-26 17:55:34 +02:00
parent f377e15277
commit 6ddeb2937a
1 changed files with 3 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/file_lzh.c
View file

@ -96,7 +96,9 @@ static void file_rename_level0(file_recovery_t *file_recovery)
return;
buffer_size=fread(buffer, 1, sizeof(buffer), file);
fclose(file);
if(buffer_size<sizeof(struct lzh_level0))
if(buffer_size < sizeof(struct lzh_level0))
return;
if(buffer_size < sizeof(struct lzh_level0) + hdr->filename_len)
return;
for(i=0; i< hdr->filename_len && hdr->filename[i]!=0 && hdr->filename[i]!='.'; i++);
file_rename(file_recovery, hdr->filename, i, 0, NULL, 1);