Skip to content

OOB access when parse_rela_sect_smart failed #53

@ThomasKing2014

Description

@ThomasKing2014

"if ((size_t)p - (size_t)kern_buf >= kern_mmap_size) { "

should be

if ((size_t)p + sizeof(*p) - (size_t)kern_buf >= kern_mmap_size) {

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions