mirror of
https://github.com/hrydgard/ppsspp.git
synced 2026-08-31 09:45:24 +02:00
initPostfixExpression() filled a fixed char subStr[256] with no bound check while tokenizing numeric literals and identifiers. A 256+ char token in a debugger expression (breakpoint condition, watch, memory.search) - settable over the network via the WebSocket debugger - smashed the stack. Now bails out with an error once the token reaches the buffer size. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01L4QAoxV2KY7ek4PcZw3WvY