Uploaded image for project: 'Core ReactOS'
  1. Core ReactOS
  2. CORE-16456

Bugs in PE loader

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Major
    • None
    • NTCore

    Description

      Code in ntoskrnl\mm\section.c

      • Missing validation that ImageBase is below highest user address
      • Missing validation that ImageBase + SizeOfImage is below highest user address (this might also be checked in MapViewOfImageSection)
      • Missing validation that sections don't exceed user-mode range
      • Only maximum size of all PE sections is used, but Windows actually resevers the entire range specified by SizeOfImage.

      This needs some tests (ntdll_apitest:NtMapViewOfSection)

       

      Attachments

        Activity

          People

            ThePhysicist Timo Kreuzer
            ThePhysicist Timo Kreuzer
            Votes:
            4 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated: