Files
ppsspp/Core
Henrik Rydgård 5d10f281ef Fix integer overflow in PMF video frame buffer allocation
pmf_init reported stream dimensions without a cap, and PMFView::Draw
allocated width * height * 4 with 32-bit int arithmetic, so a crafted
ICON1.PMF could overflow the allocation to a small buffer while
sws_scale wrote the full frame.

- Reject videos with dimensions outside 1..720x480 in pmf_init (PMFs on
  the PSP never exceed 720x480).
- Use size_t arithmetic for the frame buffer allocation.
2026-08-01 11:57:27 +02:00
..
2026-06-02 11:15:08 +02:00
2026-07-30 10:03:15 +02:00
2026-07-27 23:41:13 +02:00
2026-07-29 16:27:33 +02:00
2026-06-12 17:28:52 +02:00
2025-05-31 18:25:55 +02:00
2025-03-27 14:26:48 +01:00
2026-07-29 16:27:33 +02:00
2025-08-31 13:37:43 +02:00
2026-07-27 18:37:28 +02:00
2026-07-29 16:27:33 +02:00
2026-07-23 15:04:04 -04:00
2025-10-27 12:20:24 +01:00