fix #2954 - oob read in dex.c

rizinorg · Aug 24, 2022 · 7692751 · 7692751
1 parent 6a47eeb
commit 7692751
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/librz/bin/format/dex/dex.c b/librz/bin/format/dex/dex.c
@@ -816,6 +816,9 @@ static char *dex_resolve_proto_id(RzBinDex *dex, const char *name, ut32 proto_id
 	rz_strbuf_append(sb, "(");
 	for (ut32 i = 0; i < proto_id->type_list_size; ++i) {
 		ut32 type_idx = proto_id->type_list[i];
+		if (type_idx >= dex->type_ids_size) {
+			continue;
+		}
 
 		const DexString *param = dex_resolve_string_id_native(dex, dex->types[type_idx]);
 		if (!param) {