Files
ppsspp/Core
Henrik Rydgård 17d899d2d3 Replay: avoid size_t wraparound in side-data truncation check
ReplayExecuteBlob's bounds check (i + item.info.size > sz) can
overflow on platforms where size_t is 32-bit, since item.info.size is
a client/file-supplied u32 read from replay.execute's base64 blob -
a crafted value near UINT32_MAX could wrap the sum below sz, passing
the check before an out-of-bounds memcpy. Use a subtraction-based
check instead, which can't overflow regardless of size_t width.
2026-08-11 15:40:30 +02:00
..
2026-08-11 10:28:36 +02:00
2026-08-09 22:10:54 +02:00
2026-08-11 09:08:52 +02:00
2026-08-11 10:28:48 +02:00
2026-08-11 10:28:36 +02:00
2026-06-02 11:15:08 +02:00
2026-08-11 10:28:36 +02:00
2026-08-09 22:10:54 +02:00
2026-08-10 11:02:25 +02:00
2026-08-11 10:28:36 +02:00
2026-07-29 16:27:33 +02:00
2026-08-03 19:11:07 +02:00
2026-08-10 10:11:24 +02:00
2026-08-05 09:48:51 +02:00
2026-08-05 00:15:56 +02:00
2026-08-11 10:28:47 +02:00
2025-03-27 14:26:48 +01:00
2026-08-11 09:08:52 +02:00
2026-08-11 10:28:48 +02:00
2026-08-10 10:11:24 +02:00
2026-07-29 16:27:33 +02:00
2026-07-27 18:37:28 +02:00
2026-07-29 16:27:33 +02:00