Files
ppsspp/Core/HLE
Henrik Rydgård 4cd611b71f Fix out-of-bounds reads in ATRAC track parsing
AnalyzeAtracTrack used max(fileSize, size) as the chunk-parse bound with
fileSize taken from the file's RIFF header, so a crafted inflated RIFF
size could push reads past the end of the buffer. Keep the real-library
behavior of tolerating a too-low size, but clamp the parse bound to the
actual mapped guest memory at the buffer.

Also guard ParseWaveAT3's RIFF scan against a blockSize < 4 underflow
that could make the offset negative and bypass the loop bounds check, and
clamp readSize to the mapped region in Atrac2::SetData before parsing.
2026-08-01 11:57:27 +02:00
..
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-07-22 17:48:20 +02:00
2025-04-03 14:13:50 +02:00
2025-08-06 17:44:54 +02:00
2026-01-18 23:40:13 +02:00
2025-07-20 19:30:35 +02:00
2025-07-20 19:30:35 +02:00
2025-12-30 20:31:06 +01:00
2026-07-16 15:03:20 +02:00
2025-04-14 22:27:51 +02:00
2025-03-05 17:02:46 +01:00
2025-07-20 19:32:05 +02:00
2025-07-20 19:32:05 +02:00
2025-02-14 09:50:55 -06:00
2026-07-18 11:57:56 +02:00
2026-06-13 17:12:16 +02:00
2025-01-05 19:14:15 +01:00
2026-07-30 00:26:10 +02:00
2025-04-03 14:13:50 +02:00
2025-05-27 17:48:23 +02:00
2025-02-04 11:53:22 -06:00
2026-07-27 14:58:59 +02:00
2026-07-30 18:44:44 +02:00