Acts1631 8220a0f855 Validate ZIP paths after stripping their common prefix ...

ExtractZipContents checked each archive path for parent components
before removing stripChars. A name could become ../ only after
stripping and escape the install directory, allowing a crafted archive
to overwrite files in sibling PSP directories.

Validate both archive and output paths, and apply stripping consistently
when checking for overwrites.

2026-10-12 22:17:53 -04:00

..

Debugger

Debugger: Add hle.func.hash, to get a function's hash for ReplaceTables

2026-10-12 10:06:16 +02:00

Dialog

OSK: Skip the old wstring in savestates as bytes

2026-10-12 10:52:46 +02:00

ELF

Keep JIT block entries and replacement hooks out of PSP memory

2026-10-11 10:33:30 +02:00

FileLoaders

DiskCachingFileLoader: keep the partial last block of the file too

2026-09-27 15:31:17 +03:00

FileSystems

FileSystems: Reject parent directory references in savestate file names

2026-10-09 15:32:06 +02:00

Font

Savestate: Bounds-check sizes from the file, and plug leaks on load

2026-09-28 09:34:06 -06:00

HLE

fix gow vortex patch by making sure changed register value get's used in JIT

2026-10-12 16:40:43 +02:00

HW

Sas: End a voice with a bad VAG position on state load instead of failing

2026-10-12 10:52:46 +02:00

MIPS

Coded Arms: Contagion: Read back the stencil the crosshair checks

2026-10-12 12:15:56 +02:00

Util

Validate ZIP paths after stripping their common prefix

2026-10-12 22:17:53 -04:00

AVIDump.cpp

…

AVIDump.h

…

CMakeLists.txt

Merge pull request #22368 from hrydgard/remove-minimp3

2026-09-28 11:31:40 -06:00

CmdLine.cpp

Headless: add --frame-stats, flips per emulated second after a state load

2026-10-12 10:52:46 +02:00

CmdLine.h

Headless: add --frame-stats, flips per emulated second after a state load

2026-10-12 10:52:46 +02:00

Compatibility.cpp

Add AccurateSplines compat flag, enable for Coded Arms

2026-10-12 14:04:38 +02:00

Compatibility.h

Add AccurateSplines compat flag, enable for Coded Arms

2026-10-12 14:04:38 +02:00

Config.cpp

iOS: Remove OpenGL support from the app

2026-10-11 16:13:28 +02:00

Config.h

SoftGPU: Remove the pixel and sampler JITs

2026-10-10 13:44:48 +02:00

ConfigSettings.cpp

Claude found this code buggy, and it's not used, so delete it.

2026-08-31 16:37:55 +02:00

ConfigSettings.h

Claude found this code buggy, and it's not used, so delete it.

2026-08-31 16:37:55 +02:00

ConfigValues.h

De-claude some comments

2026-09-11 21:24:18 -06:00

ControlMapper.cpp

Don't fire single-button mappings while a combo using them is held

2026-09-03 12:37:31 -06:00

ControlMapper.h

Don't fire single-button mappings while a combo using them is held

2026-09-03 12:37:31 -06:00

Core.cpp

GE debugger: Fix the stepping request handshake

2026-09-29 09:49:10 -06:00

Core.h

Headless: forward the program's stdout/stderr to ours by default

2026-09-17 09:59:37 -06:00

Core.vcxproj

Utility: Stand in for the HtmlViewer, offering to open the page in a browser

2026-09-25 12:50:23 -06:00

Core.vcxproj.filters

Utility: Stand in for the HtmlViewer, offering to open the page in a browser

2026-09-25 12:50:23 -06:00

CoreParameter.h

Headless: Add --dump-compat, to apply compat settings to frame dumps

2026-10-09 09:59:59 +02:00

CoreTiming.cpp

CoreTiming: Grow the event table for events a savestate lacks

2026-09-30 09:06:30 -06:00

CoreTiming.h

Add cpu.runUntilTime: run to a point in emulated time and break there

2026-08-18 09:32:04 +02:00

CwCheat.cpp

Remove obsolete JitInvalidationHack

2026-10-11 22:06:06 +02:00

CwCheat.h

…

EmuThread.cpp

Android: Converge the GL and Vulkan lifecycles on a shared RunGraphicsLoop

2026-10-08 15:29:12 +02:00

EmuThread.h

Android: Converge the GL and Vulkan lifecycles on a shared RunGraphicsLoop

2026-10-08 15:29:12 +02:00

FFMPEGCompat.h

…

FrameTiming.cpp

…

FrameTiming.h

…

HDRemaster.cpp

…

HDRemaster.h

…

Instance.cpp

Instance: lock the shared counter for real, and don't hand out ID 0

2026-08-31 12:53:34 +02:00

Instance.h

…

KeyMap.cpp

Add a bindable key to create frame dumps

2026-10-09 13:26:22 +02:00

KeyMap.h

Add a bindable key to create frame dumps

2026-10-09 13:26:22 +02:00

KeyMapDefaults.cpp

Map the right analog stick by default on Android pads

2026-09-04 13:10:54 -06:00

KeyMapDefaults.h

…

Loaders.cpp

Install savedata zips that contain a single save folder's files in the root

2026-10-12 12:27:24 +02:00

Loaders.h

Install savedata zips that contain a single save folder's files in the root

2026-10-12 12:27:24 +02:00

LuaContext.cpp

LuaContext: don't run console commands without a Lua state

2026-08-31 12:22:28 +02:00

LuaContext.h

…

MemFault.cpp

Keep JIT block entries and replacement hooks out of PSP memory

2026-10-11 10:33:30 +02:00

MemFault.h

Debugger: surface source line info in six more places

2026-08-18 13:42:14 +02:00

MemMap.cpp

Darwin: Reserve space for the memory views instead of probing for it

2026-10-12 19:08:03 +02:00

MemMap.h

Keep JIT block entries and replacement hooks out of PSP memory

2026-10-11 10:33:30 +02:00

MemMapFunctions.cpp

Core: Let 16-bit CPU accesses through the depth mirrors see the GE's layout

2026-10-08 18:37:23 +02:00

MemMapHelpers.h

Rename the get-memory-pointer functions to make it clear where CPU exceptions can happen.

2026-08-12 14:06:16 +02:00

Opcode.h

…

PSPLoaders.cpp

Attach the NPDRM ISO dump thread to JNI

2026-10-12 14:33:00 +02:00

PSPLoaders.h

Headless improvements

2026-07-29 16:27:33 +02:00

Replay.cpp

Cut down on Claude's excesses

2026-08-11 15:43:48 +02:00

Replay.h

…

Reporting.cpp

Remove leftovers of 32-bit ARM Windows support

2026-09-28 13:58:29 -06:00

Reporting.h

…

RetroAchievements.cpp

IconCache: Expire only avatars after a day, other icons after 30 days

2026-10-01 10:26:00 -06:00

RetroAchievements.h

IconCache: Expire only avatars after a day, other icons after 30 days

2026-10-01 10:26:00 -06:00

SaveState.cpp

SaveState: Drop queued operations at shutdown

2026-10-12 14:32:59 +02:00

SaveState.h

Savestate browser: delete the screenshot and name file along with the state

2026-09-12 13:58:20 -06:00

SaveStateRewind.cpp

Fix three more out-of-bounds writes

2026-08-30 22:45:50 +02:00

SaveStateRewind.h

Fix three more out-of-bounds writes

2026-08-30 22:45:50 +02:00

Screenshot.cpp

When taking a screenshot, clear all notifications except achievements.

2026-10-11 17:40:01 +02:00

Screenshot.h

…

System.cpp

Headless: Add --dump-compat, to apply compat settings to frame dumps

2026-10-09 09:59:59 +02:00

System.h

Read a frame dump's game ID after a leading issue number in its name

2026-10-08 12:33:09 +02:00

TiltEventProcessor.cpp

…

TiltEventProcessor.h

…

WaveFile.cpp

WaveFile: don't assert-crash when the wav file couldn't be opened

2026-08-20 00:40:41 +02:00

WaveFile.h

WaveFile: don't assert-crash when the wav file couldn't be opened

2026-08-20 00:40:41 +02:00

WebServer.cpp

Validate untrusted IDs before using them as directory names

2026-10-05 13:39:06 -06:00

WebServer.h

Fix for headless port problem by Claude

2026-08-16 23:09:12 +02:00

x360_compat.h

…