SFileAddListFile optimized for protectors that set too large hash table

5 files changed, 51 insertions, 21 deletions

diff --git a/src/SBaseCommon.cpp b/src/SBaseCommon.cpp
index 5b81bad..1209719 100644
--- a/src/SBaseCommon.cpp
+++ b/src/SBaseCommon.cpp
@@ -992,7 +992,7 @@ void * LoadMpqTable(
     DWORD dwCompressedSize,

     DWORD dwTableSize,

     DWORD dwKey,

-    bool * pbTableIsCut)

+    DWORD * PtrRealTableSize)

 {

     ULONGLONG FileSize = 0;

     LPBYTE pbCompressed = NULL;

@@ -1037,13 +1037,15 @@ void * LoadMpqTable(
                 // Fill the extra data with zeros

                 dwBytesToRead = (DWORD)(FileSize - ByteOffset);

                 memset(pbMpqTable + dwBytesToRead, 0, (dwTableSize - dwBytesToRead));

-

-                // Give the caller information that the table was cut

-                if(pbTableIsCut != NULL)

-                    pbTableIsCut[0] = true;

             }

         }

 

+        // Give the caller information that the table was cut

+        if(PtrRealTableSize != NULL)

+        {

+            PtrRealTableSize[0] = dwBytesToRead;

+        }

+

         // If everything succeeded, read the raw table from the MPQ

         if(FileStream_Read(ha->pStream, &ByteOffset, pbToRead, dwBytesToRead))

         {

diff --git a/src/SBaseFileTable.cpp b/src/SBaseFileTable.cpp
index 1b79243..94e4469 100644
--- a/src/SBaseFileTable.cpp
+++ b/src/SBaseFileTable.cpp
@@ -2329,7 +2329,7 @@ static TMPQHash * LoadHashTable(TMPQArchive * ha)
     TMPQHash * pHashTable = NULL;

     DWORD dwTableSize;

     DWORD dwCmpSize;

-    bool bHashTableIsCut = false;

+    DWORD dwRealTableSize = 0;

 

     // Note: It is allowed to load hash table if it is at offset 0.

     // Example: MPQ_2016_v1_ProtectedMap_HashOffsIsZero.w3x

@@ -2351,12 +2351,15 @@ static TMPQHash * LoadHashTable(TMPQArchive * ha)
             dwCmpSize = (DWORD)pHeader->HashTableSize64;

 

             // Read, decrypt and uncompress the hash table

-            pHashTable = (TMPQHash *)LoadMpqTable(ha, ByteOffset, pHeader->MD5_HashTable, dwCmpSize, dwTableSize, g_dwHashTableKey, &bHashTableIsCut);

+            pHashTable = (TMPQHash *)LoadMpqTable(ha, ByteOffset, pHeader->MD5_HashTable, dwCmpSize, dwTableSize, g_dwHashTableKey, &dwRealTableSize);

 //          DumpHashTable(pHashTable, pHeader->dwHashTableSize);

 

             // If the hash table was cut, we can/have to defragment it

-            if(pHashTable != NULL && bHashTableIsCut)

+            if(pHashTable != NULL && dwRealTableSize != 0 && dwRealTableSize < dwTableSize)

+            {

+                ha->dwRealHashTableSize = dwRealTableSize;

                 ha->dwFlags |= (MPQ_FLAG_MALFORMED | MPQ_FLAG_HASH_TABLE_CUT);

+            }

             break;

 

         case MPQ_SUBTYPE_SQP:

@@ -2390,7 +2393,7 @@ TMPQBlock * LoadBlockTable(TMPQArchive * ha, bool /* bDontFixEntries */)
     ULONGLONG ByteOffset;

     DWORD dwTableSize;

     DWORD dwCmpSize;

-    bool bBlockTableIsCut = false;

+    DWORD dwRealTableSize;

 

     // Note: It is possible that the block table starts at offset 0

     // Example: MPQ_2016_v1_ProtectedMap_HashOffsIsZero.w3x

@@ -2412,10 +2415,10 @@ TMPQBlock * LoadBlockTable(TMPQArchive * ha, bool /* bDontFixEntries */)
             dwCmpSize = (DWORD)pHeader->BlockTableSize64;

 

             // Read, decrypt and uncompress the block table

-            pBlockTable = (TMPQBlock * )LoadMpqTable(ha, ByteOffset, NULL, dwCmpSize, dwTableSize, g_dwBlockTableKey, &bBlockTableIsCut);

+            pBlockTable = (TMPQBlock * )LoadMpqTable(ha, ByteOffset, NULL, dwCmpSize, dwTableSize, g_dwBlockTableKey, &dwRealTableSize);

 

             // If the block table was cut, we need to remember it

-            if(pBlockTable != NULL && bBlockTableIsCut)

+            if(pBlockTable != NULL && dwRealTableSize && dwRealTableSize < dwTableSize)

                 ha->dwFlags |= (MPQ_FLAG_MALFORMED | MPQ_FLAG_BLOCK_TABLE_CUT);

             break;

 

diff --git a/src/SFileListFile.cpp b/src/SFileListFile.cpp
index a1e16b0..8ce9ae4 100644
--- a/src/SFileListFile.cpp
+++ b/src/SFileListFile.cpp
@@ -409,8 +409,10 @@ static LPBYTE CreateListFile(TMPQArchive * ha, DWORD * pcbListFile)
 static DWORD SListFileCreateNodeForAllLocales(TMPQArchive * ha, const char * szFileName)

 {

     TFileEntry * pFileEntry;

-    TMPQHash * pFirstHash;

+    TMPQHash * pHashEnd;

     TMPQHash * pHash;

+    DWORD dwName1;

+    DWORD dwName2;

 

     // If we have HET table, use that one

     if(ha->pHetTable != NULL)

@@ -428,17 +430,39 @@ static DWORD SListFileCreateNodeForAllLocales(TMPQArchive * ha, const char * szF
     // If we have hash table, we use it

     if(ha->pHashTable != NULL)

     {

-        // Go while we found something

-        pFirstHash = pHash = GetFirstHashEntry(ha, szFileName);

-        while(pHash != NULL)

+        // Get the end of the hash table and both names

+        pHashEnd = ha->pHashTable + ha->pHeader->dwHashTableSize;

+        dwName1 = ha->pfnHashString(szFileName, MPQ_HASH_NAME_A);

+        dwName2 = ha->pfnHashString(szFileName, MPQ_HASH_NAME_B);

+

+        // Some protectors set very high hash table size (0x00400000 items or more)

+        // in order to make this process very slow. We will ignore items

+        // in the hash table that would be beyond the end of the file.

+        // Example MPQ: MPQ_2022_v1_Sniper.scx

+        if(ha->dwFlags & MPQ_FLAG_HASH_TABLE_CUT)

+            pHashEnd = ha->pHashTable + (ha->dwRealHashTableSize / sizeof(TMPQHash));

+

+        // Go through the hash table and put the name in each item that has the same name pair

+        for(pHash = ha->pHashTable; pHash < pHashEnd; pHash++)

         {

-            // Allocate file name for the file entry

-            AllocateFileName(ha, ha->pFileTable + MPQ_BLOCK_INDEX(pHash), szFileName);

-

-            // Now find the next language version of the file

-            pHash = GetNextHashEntry(ha, pFirstHash, pHash);

+            if(pHash->dwName1 == dwName1 && pHash->dwName2 == dwName2 && MPQ_BLOCK_INDEX(pHash) < ha->dwFileTableSize)

+            {

+                // Allocate file name for the file entry

+                AllocateFileName(ha, ha->pFileTable + MPQ_BLOCK_INDEX(pHash), szFileName);

+            }

         }

 

+        // Go while we found something

+        //pFirstHash = pHash = GetFirstHashEntry(ha, szFileName);

+        //while(pHash != NULL)

+        //{

+        //    // Allocate file name for the file entry

+        //    AllocateFileName(ha, ha->pFileTable + MPQ_BLOCK_INDEX(pHash), szFileName);

+

+        //    // Now find the next language version of the file

+        //    pHash = GetNextHashEntry(ha, pFirstHash, pHash);

+        //}

+

         return ERROR_SUCCESS;

     }

 

diff --git a/src/StormCommon.h b/src/StormCommon.h
index f452112..865d975 100644
--- a/src/StormCommon.h
+++ b/src/StormCommon.h
@@ -318,7 +318,7 @@ int SCompDecompressMpk(void * pvOutBuffer, int * pcbOutBuffer, void * pvInBuffer
 

 TMPQFile * CreateFileHandle(TMPQArchive * ha, TFileEntry * pFileEntry);

 TMPQFile * CreateWritableHandle(TMPQArchive * ha, DWORD dwFileSize);

-void * LoadMpqTable(TMPQArchive * ha, ULONGLONG ByteOffset, LPBYTE pbTableHash, DWORD dwCompressedSize, DWORD dwRealSize, DWORD dwKey, bool * pbTableIsCut);

+void * LoadMpqTable(TMPQArchive * ha, ULONGLONG ByteOffset, LPBYTE pbTableHash, DWORD dwCompressedSize, DWORD dwRealSize, DWORD dwKey, DWORD * PtrRealTableSize);

 DWORD AllocateSectorBuffer(TMPQFile * hf);

 DWORD AllocatePatchInfo(TMPQFile * hf, bool bLoadFromFile);

 DWORD AllocateSectorOffsets(TMPQFile * hf, bool bLoadFromFile);

diff --git a/src/StormLib.h b/src/StormLib.h
index adfa616..d95c2a2 100644
--- a/src/StormLib.h
+++ b/src/StormLib.h
@@ -844,6 +844,7 @@ typedef struct _TMPQArchive
     DWORD          dwFileFlags3;                // Flags for (signature)
     DWORD          dwAttrFlags;                 // Flags for the (attributes) file, see MPQ_ATTRIBUTE_XXX
     DWORD          dwValidFileFlags;            // Valid flags for the current MPQ
+    DWORD          dwRealHashTableSize;         // Real size of the hash table, if MPQ_FLAG_HASH_TABLE_CUT is zet in dwFlags
     DWORD          dwFlags;                     // See MPQ_FLAG_XXXXX
     DWORD          dwSubType;                   // See MPQ_SUBTYPE_XXX