@@ -1,3 +1,7 @@

+Fri Oct 27 02:37:49 CEST 2006 (acab)

+------------------------------------

+  * libclamav/petite.c: sanity check the number of rebuilt sections

+

 Wed Oct 25 18:03:34 CEST 2006 (tk)

 ----------------------------------

   * sigtool/sigtool.c: new option --utf16-decode

@@ -280,6 +280,11 @@ int petite_inflate2x_1to9(char *buf, uint32_t minrva, uint32_t bufsz, struct pe_

       thisrva=cli_readint32(packed+8); /* RVA of the original section */

       packed += 0x10;

+      if ( j >= 90 ) {

+	cli_dbgmsg("Petite: maximum number of sections exceeded, giving up.\n");

+	free(usects);

+	return -1;

+      }

       /* Alloc 1 more struct */

       if ( ! (tmpsct = cli_realloc(usects, sizeof(struct SECTION) * (j+1))) ) {

 	if (usects)