Files
ppsspp/Core/HLE
Henrik Rydgård 32abdd63bf Fix EP-map parsing OOB read in PSMF video stream params
EP_MAP_STRIDE * EPMapEntriesNum was computed in 32-bit and could wrap,
passing the range check while the loop read the unwrapped count; and the
check was skipped entirely when headerOffset == 0 (the player tempbuf
path).

- Use 64-bit math for the EP map size.
- Keep the guest-RAM range check when headerOffset != 0.
- Cap the entry count for the headerOffset == 0 path so the reads stay
  within the player's 64KB tempbuf.
2026-08-01 11:57:27 +02:00
..
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-04-03 14:13:50 +02:00
2025-08-06 17:44:54 +02:00
2026-01-18 23:40:13 +02:00
2025-07-20 19:30:35 +02:00
2025-07-20 19:30:35 +02:00
2025-12-30 20:31:06 +01:00
2026-07-16 15:03:20 +02:00
2025-04-14 22:27:51 +02:00
2025-03-05 17:02:46 +01:00
2025-07-20 19:32:05 +02:00
2025-07-20 19:32:05 +02:00
2025-02-14 09:50:55 -06:00
2026-07-18 11:57:56 +02:00
2026-06-13 17:12:16 +02:00
2025-01-05 19:14:15 +01:00
2026-07-30 00:26:10 +02:00
2025-04-03 14:13:50 +02:00
2025-05-27 17:48:23 +02:00
2025-02-04 11:53:22 -06:00
2026-07-27 14:58:59 +02:00
2026-07-30 18:44:44 +02:00