mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-31 17:55:23 +02:00
pngLoadPtr allocated the decoded buffer directly from attacker-controlled PNG IHDR dimensions with no upper bound, so browsing a crafted game icon or savedata could trigger a multi-gigabyte allocation. - Add maxWidth/maxHeight parameters to pngLoadPtr (default 8192x8192) and reject images larger than the limits. - Thread the limits through LoadTextureLevelsFromFileData, CreateTextureFromFileData, and CreateTextureFromFile. - Limit game icons to 256x128 in GameInfoCache and IconCache.