elf: cap the number of allowed program headers (#461)

solana-labs · Apr 27, 2023 · e9c2d20 · e9c2d20
1 parent 2643a04
commit e9c2d20
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/src/elf.rs b/src/elf.rs
@@ -660,6 +660,15 @@ impl<V: Verifier, C: ContextObject> Executable<V, C> {
             {
                 return Err(ElfError::InvalidProgramHeader);
             }
+
+            // The toolchain currently emits up to 4 program headers. 10 is a
+            // future proof nice round number.
+            //
+            // program_headers() returns an ExactSizeIterator so count doesn't
+            // actually iterate again.
+            if elf.program_headers().count() >= 10 {
+                return Err(ElfError::InvalidProgramHeader);
+            }
         }
 
         let num_text_sections = elf