commit f2936e2e79de2f80de11946e1331f2c91c0b907e Author: DMorgan <Dmorgan> Date: Sat Oct 1 10:40:55 2011 +0200 - Fixes the first case crash of RhBug:741606 / CVE-2011-3378 where immutable region offset is way out of bounds. diff --git a/lib/header.c b/lib/header.c index ba4ad21..ab0d32e 100644 --- a/lib/header.c +++ b/lib/header.c @@ -827,7 +827,7 @@ Header headerLoad(void * uh) { int off = ntohl(pe->offset); - if (hdrchkData(off)) + if (hdrchkData(off) || hdrchkRange(dl, off)) goto errxit; if (off) { size_t nb = REGION_TAG_COUNT;