@@ -2269,10 +2269,12 @@ locoff = LL(extra, pos); pos += 8; } break; case EXTID_NTFS: + if (sz < 32) + break; pos += 4; // reserved 4 bytes if (SH(extra, pos) != 0x0001) break; if (SH(extra, pos + 2) != 24) break;