kamkow1/Limine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

lib/elf: Check image_size against SIZE_MAX in elf32_load_elsewhere

Browse Source
This commit is contained in:
Mintsuki
2026-04-17 02:19:13 +02:00
parent 843f029664
commit 4744bdbd27
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
common/lib/elf.c
View File

@@ -1065,7 +1065,6 @@ bool elf32_load_elsewhere(uint8_t *elf, size_t file_size, uint64_t *entry_point,
panic(true, "elf: Program header table extends beyond file bounds"); panic(true, "elf: Program header table extends beyond file bounds");
} }
size_t image_size = 0;
uint64_t min_paddr = (uint64_t)-1; uint64_t min_paddr = (uint64_t)-1;
uint64_t max_paddr = 0; uint64_t max_paddr = 0;
for (uint16_t i = 0; i < hdr->ph_num; i++) { for (uint16_t i = 0; i < hdr->ph_num; i++) {
@@ -1084,7 +1083,11 @@ bool elf32_load_elsewhere(uint8_t *elf, size_t file_size, uint64_t *entry_point,
max_paddr = top; max_paddr = top;
} }
} }
image_size = max_paddr - min_paddr; uint64_t image_size_64 = max_paddr - min_paddr;
if (image_size_64 > SIZE_MAX) {
panic(true, "elf: Image size exceeds address space");
}
size_t image_size = (size_t)image_size_64;
void *elsewhere = ext_mem_alloc(image_size); void *elsewhere = ext_mem_alloc(image_size);