Files
ppsspp/UI
Henrik Rydgård 5d10f281ef Fix integer overflow in PMF video frame buffer allocation
pmf_init reported stream dimensions without a cap, and PMFView::Draw
allocated width * height * 4 with 32-bit int arithmetic, so a crafted
ICON1.PMF could overflow the allocation to a small buffer while
sws_scale wrote the full frame.

- Reject videos with dimensions outside 1..720x480 in pmf_init (PMFs on
  the PSP never exceed 720x480).
- Use size_t arithmetic for the frame buffer allocation.
2026-08-01 11:57:27 +02:00
..
2025-11-24 20:33:13 +01:00
2025-08-22 21:21:19 +02:00
2026-05-13 17:25:52 +02:00
2026-05-28 10:56:35 +02:00
2026-07-24 15:31:41 +02:00
2026-07-18 11:57:48 +02:00
2026-06-24 23:04:17 +02:00
2026-07-30 18:27:38 +02:00
2026-06-24 23:04:17 +02:00
2026-06-24 23:04:17 +02:00
2026-07-30 18:44:44 +02:00
2025-03-26 18:57:38 +01:00
2026-05-28 10:56:35 +02:00
2026-01-02 14:20:20 +01:00
2026-05-13 17:25:52 +02:00
2026-02-24 00:56:45 +01:00
2026-02-24 00:56:45 +01:00
2026-07-18 11:57:48 +02:00