admin/nikaiw-VMkatz
1
0
Fork 0
mirror of https://github.com/nikaiw/VMkatz synced 2026-09-25 07:51:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

Validate GPT entry size before allocation and slice access

Browse Source 
Reject entry_size outside 128-4096 range to prevent:
- panic on slice &entry[0..16] when entry_size < 16
- OOM allocation from forged u32 entry_size
GPT spec mandates minimum 128 bytes per partition entry.
This commit is contained in:
NK
2026-03-17 02:16:51 +01:00
parent a1e0a65e7f
commit 2f01b48258
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/sam/partition.rs
+8
View File
@@ -82,6 +82,14 @@ fn find_gpt_ntfs_partitions<R: Read + Seek>(reader: &mut R) -> Result<Vec<u64>>
let num_entries = crate::utils::read_u32_le(&hdr, 0x50).unwrap_or(0);
let entry_size = crate::utils::read_u32_le(&hdr, 0x54).unwrap_or(0);
// GPT spec: entry_size is typically 128 bytes; reject invalid values
if !(128..=4096).contains(&entry_size) {
return Err(crate::error::VmkatzError::DecryptionError(format!(
"Invalid GPT entry size: {} (expected 128-4096)",
entry_size,
)));
}
log::debug!(
"GPT: entry_lba={}, num_entries={}, entry_size={}",
entry_lba,