mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-30 17:35:09 +02:00
ReadSFO dereferenced index table entries without checking the table fit within the buffer, and GetDataOffset had no bounds checks at all (reading attacker-controlled offsets and strcmp'ing without a terminator guard). - Validate the index table fits entirely within the buffer in ReadSFO. - Add a size parameter to GetDataOffset and validate the index table, key/data table positions, and key string termination before use.