Fix oobread in the macho parser ##crash

* Reported by @Han0nly via huntr.dev * Reproducers: heapoverflow1 * BountyID: e589bd97-4c74-4e79-93b5-0951a281facc
radareorg · Apr 5, 2022 · ca8d8b3 · ca8d8b3
1 parent a4dbf11
commit ca8d8b3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/libr/bin/format/mach0/mach0.c b/libr/bin/format/mach0/mach0.c
@@ -3178,7 +3178,7 @@ static void parse_relocation_info(struct MACH0_(obj_t) *bin, RSkipList *relocs,
 	for (i = 0; i < num; i++) {
 		struct relocation_info a_info = info[i];
 		ut32 sym_num = a_info.r_symbolnum;
-		if (sym_num > bin->nsymtab) {
+		if (sym_num >= bin->nsymtab) {
 			continue;
 		}