lib/pe: Validate SizeOfOptionalHeader is large enough

2026-04-02 19:22:20 +02:00
parent dd2354bae9
commit 5df9958154
1 changed files with 4 additions and 0 deletions
--- a/common/lib/pe.c
+++ b/common/lib/pe.c
@@ -183,6 +183,10 @@ static void pe64_validate(uint8_t *image, size_t file_size) {
        panic(true, "pe: Not a valid PE32+ file");
    }

+    if (nt_hdrs->FileHeader.SizeOfOptionalHeader < sizeof(IMAGE_OPTIONAL_HEADER64)) {
+        panic(true, "pe: SizeOfOptionalHeader too small");
+    }
+
 #if defined(__x86_64__) || defined(__i386__)
    if (nt_hdrs->FileHeader.Machine != IMAGE_FILE_MACHINE_AMD64) {
        panic(true, "pe: Not an x86-64 PE file");