From c2c1999f33e926a7e51c98b0ce83871eab8f42ed Mon Sep 17 00:00:00 2001
From: Natalia Portillo <claunia@claunia.com>
Date: Mon, 30 Mar 2026 12:55:44 +0100
Subject: [PATCH] [NTFS] Guard against too big non-resident data sizes.

---
 Aaru.Filesystems/NTFS/Xattrs.cs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/Aaru.Filesystems/NTFS/Xattrs.cs b/Aaru.Filesystems/NTFS/Xattrs.cs
index f76588315..a910cb43b 100644
--- a/Aaru.Filesystems/NTFS/Xattrs.cs
+++ b/Aaru.Filesystems/NTFS/Xattrs.cs
@@ -535,6 +535,13 @@ public sealed partial class NTFS
     /// <returns>Error number indicating success or failure.</returns>
     ErrorNumber ReadNonResidentData(List<(long offset, long length)> dataRuns, long dataSize, ref byte[] buf)
     {
+        if(dataSize > int.MaxValue)
+        {
+            AaruLogging.Debug(MODULE_NAME, "Non-resident data size {0} exceeds maximum array size", dataSize);
+
+            return ErrorNumber.OutOfRange;
+        }
+
         buf = new byte[dataSize];
 
         long bytesRead = 0;