Eventlogedit-evtx--Evolution icon indicating copy to clipboard operation
Eventlogedit-evtx--Evolution copied to clipboard
verified publisher icon 3gstudent

FreeSpaceOffset is 0

Open basicDaveDev opened this issue 5 years ago • 1 comments

At the file Eventlogedit-evtx--Evolution/DeleteRecordofFile.cpp

unsigned char *ChecksumBuf1 = new unsigned char[currentChunk->FreeSpaceOffset - 512];
				memcpy(ChecksumBuf1, (PBYTE)currentChunk + 512, currentChunk->FreeSpaceOffset - 512);
				crc32 = GetCRC32(ChecksumBuf1, currentChunk->FreeSpaceOffset - 512);

In this portion of code, you may have a bug/untreated case if there is the value of FreeSpaceOffset is 0.

basicDaveDev avatar Oct 30 '20 11:10 basicDaveDev

the same problem (

vklymchuk avatar Jul 15 '21 08:07 vklymchuk