Pe: fix segmentation fault when parsing a 16 bit DOS binary

fix issue #1
vtorri · Jan 15, 2016 · 2a879e2 · 2a879e2
1 parent b29af93
commit 2a879e2
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/src/lib/examine_pe.c b/src/lib/examine_pe.c
@@ -163,6 +163,12 @@ exm_pe_new(const char *filename)
         goto del_pe_map;
     }
 
+    if (dos_header->e_lfanew > exm_map_size_get(pe->map))
+    {
+        EXM_LOG_ERR("not a valid PE file (probably 16-bit DOS module)");
+        goto del_pe_map;
+    }
+
     pe->nt_header = (IMAGE_NT_HEADERS *)((unsigned char *)dos_header + dos_header->e_lfanew);
     if (pe->nt_header->Signature != IMAGE_NT_SIGNATURE)
     {