mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-31 17:55:23 +02:00
Henrik RydgårdandClaude Sonnet 5
b0ab7fbaf7
The memmove length was computed from size_ after ExtendByOne() had already bumped it, so it moved (oldSize - pos + 1) elements instead of (oldSize - pos) - reading one uninitialized element past the old data and writing one element past the new logical size. Currently masked by ExtendByOne()'s growth policy always leaving capacity slack, but a real overflow waiting for that assumption to not hold. Now captures the old size before extending. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01L4QAoxV2KY7ek4PcZw3WvY