Commit 926a7535 by devttys0

Additional validation to installshield cabinet files

parent 7464f3ea
......@@ -277,7 +277,10 @@
0 string ISc( InstallShield Cabinet archive data
# TODO: Version number checks should be made more specific for false positive filtering
>5 byte&0xf0 =0x60 version 6,
>5 byte&0xf0 !0x60 version 4/5,
>5 byte&0xf0 <0x60 version 4/5,
>5 byte&0xf0 >0x60 invalid version,
>12 lelong <0 invalid offset,
>12 lelong >100000 invalid offset,
>(12.l+40) lelong x %u files
# Windows CE package files
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment