mirror of
https://github.com/Adaptix-Framework/AdaptixC2
synced 2026-06-08 10:20:39 +00:00
Add validation for packer size in ProcessCommandTasks
This commit is contained in:
@@ -15,6 +15,14 @@ void Commander::ProcessCommandTasks(BYTE* recv, ULONG recvSize, Packer* outPacke
|
||||
*inPacker = Packer( recv, recvSize );
|
||||
|
||||
ULONG packerSize = inPacker->Unpack32();
|
||||
|
||||
// Check if the packer size is valid
|
||||
if (packerSize > recvSize - 4)
|
||||
{
|
||||
MemFreeLocal((LPVOID*)&inPacker, sizeof(Packer));
|
||||
return;
|
||||
}
|
||||
|
||||
while ( packerSize + 4 > inPacker->datasize())
|
||||
{
|
||||
ULONG CommandId = inPacker->Unpack32();
|
||||
|
||||
Reference in New Issue
Block a user