X-Git-Url: https://wimlib.net/git/?a=blobdiff_plain;f=src%2Fmetadata_resource.c;h=041d1f78007bb843631e84f578268fa5f8f88a87;hb=ebe0206c700963ee0ace86cc55fca6570b03cac3;hp=13ebf51ff6611dc2ddcc854153d3487abae944de;hpb=30ba1eb06caca0b20a47d8dd75a117c82d730da7;p=wimlib

diff --git a/src/metadata_resource.c b/src/metadata_resource.c
index 13ebf51f..041d1f78 100644
--- a/src/metadata_resource.c
+++ b/src/metadata_resource.c
@@ -59,6 +59,7 @@ read_metadata_resource(WIMStruct *wim, struct wim_image_metadata *imd)
 	struct wim_dentry *root;
 	const struct wim_lookup_table_entry *metadata_lte;
 	u64 metadata_len;
+	u8 hash[SHA1_HASH_SIZE];
 
 	metadata_lte = imd->metadata_lte;
 	metadata_len = wim_resource_size(metadata_lte);
@@ -99,6 +100,13 @@ read_metadata_resource(WIMStruct *wim, struct wim_image_metadata *imd)
 	if (ret)
 		goto out_free_buf;
 
+	sha1_buffer(buf, metadata_len, hash);
+	if (!hashes_equal(metadata_lte->hash, hash)) {
+		ERROR("Metadata resource is corrupted (invalid SHA-1 message digest)!");
+		ret = WIMLIB_ERR_INVALID_RESOURCE_HASH;
+		goto out_free_buf;
+	}
+
 	DEBUG("Finished reading metadata resource into memory.");
 
 	/* The root directory entry starts after security data, aligned on an