Add missing buffer bounds check

VirusTotal · Jul 5, 2017 · d7cb734 · d7cb734
1 parent a3e06c2
commit d7cb734
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/libyara/modules/dotnet.c b/libyara/modules/dotnet.c
@@ -1409,7 +1409,8 @@ void dotnet_parse_tilde(
       continue;
 
 #define ROW_CHECK(name) \
-    rows.name = *(row_offset + matched_bits);
+    if (fits_in_pe(pe, row_offset, (matched_bits + 1) * sizeof(uint32_t))) \
+      rows.name = *(row_offset + matched_bits);
 
 #define ROW_CHECK_WITH_INDEX(name) \
     ROW_CHECK(name); \