mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-30 09:25:13 +02:00
ReadCharGlyph read glyph metadata at an attacker-controlled bit offset with no validation, and ReadShadowGlyph only checked after delegating to it. Validate charPtr (with margin for the header reads) at the top of ReadCharGlyph so it is safe regardless of caller, and drop the now redundant checks at the ReadPtr call sites.