vbpf / prevail / 22973320353

push

github

Fix heap-buffer-overflow in legacy maps section parsing

The map_count computation used ceiling division when the section size
was not evenly divisible by map_record_size, which can produce a count
whose last record extends past the section data buffer. This causes a
heap-buffer-overflow when the platform's parse_maps_section callback
iterates all records.

Fix by using floor division, and add a pre-call bounds check as a
safety invariant to prevent future regressions.

Signed-off-by: Michael Agun <danielagun@microsoft.com>

1 of 3 new or added lines in 1 file covered. (33.33%)

13334 of 14967 relevant lines covered (89.09%)

4603122.2 hits per line