Skip to content

Self-referencing resource directory causes infinite recursion and memory exhaustion #77

Description

@mxngel

A crafted PE containing a self-referencing IMAGE_RESOURCE_DIRECTORY, where resource entries point back to the root directory, causes PE-Bear to enter infinite recursion while parsing the resource tree.

This results in the UI freezing and memory usage growing continuously until the process is force-killed or system memory is exhausted.

A binary PoC is attached to reproduce the issue.
SHA-256:a5091fc233e6527430bfbb26ebd5ff3c43b5de1249b80cfd29c117509e95eeff

poc_resource_100entries.zip

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions