mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-31 17:55:23 +02:00
Henrik Rydgård
5194382b7b
ReadSFO dereferenced index table entries without checking the table fit within the buffer, and GetDataOffset had no bounds checks at all (reading attacker-controlled offsets and strcmp'ing without a terminator guard). - Validate the index table fits entirely within the buffer in ReadSFO. - Add a size parameter to GetDataOffset and validate the index table, key/data table positions, and key string termination before use.