Skype Exploit o.Ä

The corresponding parsing code roughly translates in C as following:

// read a VLD from input stream
// return 0 on error
int get_vld(unsigned int*);
 
unsigned int object_counter;
unsigned int i;
unsigned int * tab_objects;
 
// read object count (M)
if (get_vld(&object_counter)==0)
 fault();
 
// allocate memory to store sub-objects
tab_objects = HeapAlloc( sizeof(unsigned int) * object_counter );
if (tab_objects ==NULL)
 fault();
 
// read and store M sub-objects
for (i=0;i<object_counter;i++)
{
 if (get_vld(&tab_objects[i])==0)
 fault();
}
 
return;