Remove possibility of crash when giving a malformed CSV

BadYug · Nov 15, 2022 · f760cd2 · f760cd2
1 parent fe4ab63
commit f760cd2
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/EDRSandblast/Utils/NtoskrnlOffsets.c b/EDRSandblast/Utils/NtoskrnlOffsets.c
@@ -28,9 +28,13 @@ void LoadNtoskrnlOffsetsFromFile(TCHAR* ntoskrnlOffsetFilename) {
         return;
     }
 
-    TCHAR lineNtoskrnlVersion[256];
+    TCHAR lineNtoskrnlVersion[2048];
     TCHAR line[2048];
     while (_fgetts(line, _countof(line), offsetFileStream)) {
+        if (_tcsncmp(line, TEXT("ntoskrnl"), _countof(TEXT("ntoskrnl")) - 1)) {
+            _putts_or_not(TEXT("[-] CSV file format is unexpected!\n"));
+            break;
+        }
         TCHAR* dupline = _tcsdup(line);
         TCHAR* tmpBuffer = NULL;
         _tcscpy_s(lineNtoskrnlVersion, _countof(lineNtoskrnlVersion), _tcstok_s(dupline, TEXT(","), &tmpBuffer));