diff options
| author | Kelvin Zhang <zhangkelvin@google.com> | 2020-09-17 17:32:29 +0200 |
|---|---|---|
| committer | Kelvin Zhang <zhangkelvin@google.com> | 2020-09-18 23:41:51 +0200 |
| commit | d1ba38f7c96e74901779089fea6d09b0c7c2521d (patch) | |
| tree | f892e9ca467b4f751345a2a3200caf8903a217c9 /install/verifier.cpp | |
| parent | Merge "Switch to zip64 in recovery" (diff) | |
| download | android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar.gz android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar.bz2 android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar.lz android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar.xz android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.tar.zst android_bootable_recovery-d1ba38f7c96e74901779089fea6d09b0c7c2521d.zip | |
Diffstat (limited to 'install/verifier.cpp')
| -rw-r--r-- | install/verifier.cpp | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/install/verifier.cpp b/install/verifier.cpp index d8bc53f69..3f0260138 100644 --- a/install/verifier.cpp +++ b/install/verifier.cpp @@ -323,6 +323,12 @@ static std::vector<Certificate> IterateZipEntriesAndSearchForKeys(const ZipArchi std::string_view name; ZipEntry64 entry; while ((iter_status = Next(cookie, &entry, &name)) == 0) { + if (entry.uncompressed_length > std::numeric_limits<size_t>::max()) { + LOG(ERROR) << "Failed to extract " << name + << " because's uncompressed size exceeds size of address space. " + << entry.uncompressed_length; + return {}; + } std::vector<uint8_t> pem_content(entry.uncompressed_length); if (int32_t extract_status = ExtractToMemory(handle, &entry, pem_content.data(), pem_content.size()); |