committed by
Markus F.X.J. Oberhumer
parent
1b21fef081
commit
44a53736ff
+1
-1
@@ -49,7 +49,7 @@ Please report all problems or suggestions to the authors. Thanks.
|
|||||||
IMPORTANT NOTE: B<UPX> inherits the security context of any files it handles.
|
IMPORTANT NOTE: B<UPX> inherits the security context of any files it handles.
|
||||||
|
|
||||||
This means that packing, unpacking, or even testing or listing a file requires
|
This means that packing, unpacking, or even testing or listing a file requires
|
||||||
the same security considerations as acutally executing the file.
|
the same security considerations as actually executing the file.
|
||||||
|
|
||||||
Use B<UPX> on trusted files only!
|
Use B<UPX> on trusted files only!
|
||||||
|
|
||||||
|
|||||||
+1
-1
@@ -622,7 +622,7 @@ void PackWcle::decodeFixups()
|
|||||||
}
|
}
|
||||||
// Guard against run-away.
|
// Guard against run-away.
|
||||||
static unsigned char const blank[9] = {0};
|
static unsigned char const blank[9] = {0};
|
||||||
if (q > (oimage + ph.u_len - sizeof(blank)) // catastrohpic worst case
|
if (q > (oimage + ph.u_len - sizeof(blank)) // catastrophic worst case
|
||||||
|| !memcmp(blank, q, sizeof(blank)) // no-good early warning
|
|| !memcmp(blank, q, sizeof(blank)) // no-good early warning
|
||||||
) {
|
) {
|
||||||
char msg[50]; snprintf(msg, sizeof(msg),
|
char msg[50]; snprintf(msg, sizeof(msg),
|
||||||
|
|||||||
Reference in New Issue
Block a user