Mirrors/wavestone-cdt-edrsandblast
1
0
Fork 0
mirror of https://github.com/wavestone-cdt/EDRSandblast.git synced 2026-06-08 16:37:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

Remove possibility of crash when giving a malformed CSV

Browse Source
This commit is contained in:
Maxime Meignan
2022-11-15 16:38:40 +01:00
parent fe4ab633da
commit f760cd20bf
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
EDRSandblast/Utils/NtoskrnlOffsets.c
+5 -1
View File
@@ -28,9 +28,13 @@ void LoadNtoskrnlOffsetsFromFile(TCHAR* ntoskrnlOffsetFilename) {
return; return;
} }
TCHAR lineNtoskrnlVersion[256]; TCHAR lineNtoskrnlVersion[2048];
TCHAR line[2048]; TCHAR line[2048];
while (_fgetts(line, _countof(line), offsetFileStream)) { while (_fgetts(line, _countof(line), offsetFileStream)) {
if (_tcsncmp(line, TEXT("ntoskrnl"), _countof(TEXT("ntoskrnl")) - 1)) {
_putts_or_not(TEXT("[-] CSV file format is unexpected!\n"));
break;
}
TCHAR* dupline = _tcsdup(line); TCHAR* dupline = _tcsdup(line);
TCHAR* tmpBuffer = NULL; TCHAR* tmpBuffer = NULL;
_tcscpy_s(lineNtoskrnlVersion, _countof(lineNtoskrnlVersion), _tcstok_s(dupline, TEXT(","), &tmpBuffer)); _tcscpy_s(lineNtoskrnlVersion, _countof(lineNtoskrnlVersion), _tcstok_s(dupline, TEXT(","), &tmpBuffer));