bplist: Prevent out-of-bounds read in plist_from_bin() when parsing offset_table
offset_table_index is read from the file, so we have full control over it. This means we can point offset_table essentially anywhere we want, which can lead to an out-of-bounds read when it will be used later on.
Showing
Please
register
or
sign in
to comment