Files
ppsspp/Core
Henrik Rydgård 32abdd63bf Fix EP-map parsing OOB read in PSMF video stream params
EP_MAP_STRIDE * EPMapEntriesNum was computed in 32-bit and could wrap,
passing the range check while the loop read the unwrapped count; and the
check was skipped entirely when headerOffset == 0 (the player tempbuf
path).

- Use 64-bit math for the EP map size.
- Keep the guest-RAM range check when headerOffset != 0.
- Cap the entry count for the headerOffset == 0 path so the reads stay
  within the player's 64KB tempbuf.
2026-08-01 11:57:27 +02:00
..
2026-06-02 11:15:08 +02:00
2026-07-30 10:03:15 +02:00
2026-07-27 23:41:13 +02:00
2026-07-29 16:27:33 +02:00
2026-06-12 17:28:52 +02:00
2025-05-31 18:25:55 +02:00
2025-03-27 14:26:48 +01:00
2026-07-29 16:27:33 +02:00
2025-08-31 13:37:43 +02:00
2026-07-27 18:37:28 +02:00
2026-07-29 16:27:33 +02:00
2026-07-23 15:04:04 -04:00
2025-10-27 12:20:24 +01:00