fix: integer overflow in pe module

VirusTotal · Nov 15, 2023 · d0b2756 · d0b2756
1 parent a85b9cb
commit d0b2756
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/yara-x/src/modules/pe/parser.rs b/yara-x/src/modules/pe/parser.rs
@@ -226,7 +226,7 @@ impl<'a> PE<'a> {
             return None;
         }
 
-        let result = section_offset + rva - section_rva;
+        let result = section_offset.saturating_add(rva - section_rva);
 
         // Make sure the resulting offset is within the file.
         if result as usize >= self.data.len() {