From 71a9941b840cdd21712de314ea8badcee4e997ac Mon Sep 17 00:00:00 2001 From: John Reiser Date: Sat, 9 May 2015 07:29:26 -0700 Subject: [PATCH] Check getImageSize(). CERT-FI 829767 id:000058,sig:06,src:000001,op:havoc,rep:64 --- src/p_wcle.cpp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/p_wcle.cpp b/src/p_wcle.cpp index dbce4d77..f059d623 100644 --- a/src/p_wcle.cpp +++ b/src/p_wcle.cpp @@ -778,6 +778,8 @@ int PackWcle::canUnpack() // FIXME: 1024 could be too large for some files //int len = 1024; int len = UPX_MIN(getImageSize(), 256u); + if (len == 0) + return false; return readPackHeader(len) ? 1 : -1; }