[Object] Ensure header size not to underflow in OffloadBinary::create

Prevent potential integer underflows when header size is not valid. Fixes: #86280.
llvm · Mar 22, 2024 · 6f44bb7 · 6f44bb7 · arichardson · Mar 23, 2024
1 parent 9c0a065
commit 6f44bb7
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/llvm/lib/Object/OffloadBinary.cpp b/llvm/lib/Object/OffloadBinary.cpp
@@ -189,7 +189,10 @@ OffloadBinary::create(MemoryBufferRef Buf) {
     return errorCodeToError(object_error::parse_failed);
 
   if (TheHeader->Size > Buf.getBufferSize() ||
-      TheHeader->EntryOffset > TheHeader->Size - sizeof(Entry) ||
+      TheHeader->Size < sizeof(Entry) || TheHeader->Size < sizeof(Header))
+    return errorCodeToError(object_error::unexpected_eof);
+
+  if (TheHeader->EntryOffset > TheHeader->Size - sizeof(Entry) ||
       TheHeader->EntrySize > TheHeader->Size - sizeof(Header))
     return errorCodeToError(object_error::unexpected_eof);