Acts1631 8220a0f855 Validate ZIP paths after stripping their common prefix ...

ExtractZipContents checked each archive path for parent components
before removing stripChars. A name could become ../ only after
stripping and escape the install directory, allowing a crafted archive
to overwrite files in sibling PSP directories.

Validate both archive and output paths, and apply stripping consistently
when checking for overwrites.

2026-10-12 22:17:53 -04:00

..

AtracTrack.cpp

Adjust the level of Claude-based paranoia here and there

2026-08-11 20:08:01 +02:00

AtracTrack.h

Atrac3: Allow sending 0xFFFFFFFF as data size. Death JR does this on audio loop for some reason.

2026-03-26 11:59:43 -06:00

AudioFormat.cpp

Cleaning up our SIMD header includes, using the new header

2024-12-19 16:08:48 +01:00

AudioFormat.h

Core: Remove disallowed register.

2022-09-30 19:48:14 -07:00

BlockAllocator.cpp

Savestates: Terminate fixed-size name strings on load

2026-10-09 15:32:06 +02:00

BlockAllocator.h

Map the PSP-2000 extra RAM for homebrew PBPs, outside the user partition

2026-09-29 12:40:59 -06:00

DarwinFileSystemServices.h

Implement iOS "bookmark" support, to preserve permissions to recent files from iCloud

2026-03-07 15:04:49 +01:00

DarwinFileSystemServices.mm

iOS: Merge the Metal view controller into the base one

2026-10-11 16:13:29 +02:00

DisArm64.cpp

Minor code cleanups

2025-07-11 15:09:15 +02:00

DisArm64.h

Headless (and main): Improve crash reporting

2026-08-11 22:36:47 +02:00

GameDB.cpp

GameDB: validate CSV structure before indexing into it

2026-08-11 08:43:52 +02:00

GameDB.h

Correctly unload GE framedumps. Additionally, look up the title when possible and show in titlebar.

2025-03-06 14:58:33 +01:00

GameManager.cpp

Validate ZIP paths after stripping their common prefix

2026-10-12 22:17:53 -04:00

GameManager.h

Install PKG game updates, and boot them

2026-09-08 11:15:15 -06:00

KL4E.cpp

Implement KL4E/KL3E decompression, so firmware modules that use it can load

2026-09-07 11:06:17 -06:00

KL4E.h

Implement KL4E/KL3E decompression, so firmware modules that use it can load

2026-09-07 11:06:17 -06:00

MemStick.cpp

Crashfix in folder move logging. Plus relax an assert

2025-06-01 10:55:21 +02:00

MemStick.h

Rework memstick moves between devices to copy, verify and then delete

2024-01-22 21:52:39 +01:00

PathUtil.cpp

Validate untrusted IDs before using them as directory names

2026-10-05 13:39:06 -06:00

PathUtil.h

Validate untrusted IDs before using them as directory names

2026-10-05 13:39:06 -06:00

PkgUnpack.cpp

Validate untrusted IDs before using them as directory names

2026-10-05 13:39:06 -06:00

PkgUnpack.h

Show and remove installed game updates from the game info screen

2026-09-08 11:15:15 -06:00

PortManager.cpp

UPnP: fix the exit hang and the CPU spin, and only run the thread when enabled

2026-08-30 00:37:05 +02:00

PortManager.h

UPnP: fix the exit hang and the CPU spin, and only run the thread when enabled

2026-08-30 00:37:05 +02:00

PPGeDraw.cpp

Savedata dialog: Draw icons over black, with alpha blending

2026-09-29 13:21:24 -06:00

PPGeDraw.h

Savedata dialog: Draw icons over black, with alpha blending

2026-09-29 13:21:24 -06:00

PSARUnpack.cpp

Create .nomedia files in the NAND directory when installing firmware

2026-10-12 12:43:36 +02:00

PSARUnpack.h

Auto-install firmware from the game disc on boot

2026-09-10 15:52:53 -06:00

RecentFiles.cpp

Minor fixes

2026-09-10 16:04:39 -06:00

RecentFiles.h

Fix startup on Android, oops

2025-03-27 01:58:53 +01:00

VideoPlayer.cpp

Fix integer overflow in PMF video frame buffer allocation

2026-08-01 11:57:27 +02:00

VideoPlayer.h

Fix the gemini-written video player to actually work

2026-02-26 09:33:26 +01:00