<feed xmlns='http://www.w3.org/2005/Atom'>
<title>dolphin/Source/Core/DiscIO, branch master</title>
<subtitle>GameCube and Wii emulator</subtitle>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/'/>
<entry>
<title>Merge pull request #14768 from phire/security/gcz_overflows</title>
<updated>2026-08-01T10:26:10+00:00</updated>
<author>
<name>JosJuice</name>
<email>josjuice@gmail.com</email>
</author>
<published>2026-08-01T10:26:10+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=ad7e793548684a183593326584313f7e2bdce4d9'/>
<id>ad7e793548684a183593326584313f7e2bdce4d9</id>
<content type='text'>
Better validation and handling of GCZ</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Better validation and handling of GCZ</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #13543 from tygyh/DiscIO-Use-views-keys</title>
<updated>2026-07-29T05:49:24+00:00</updated>
<author>
<name>Scott Mansell</name>
<email>phiren@gmail.com</email>
</author>
<published>2026-07-29T05:49:24+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=9b726fd56ba7fde6f81854ed048c5e3c75d0393c'/>
<id>9b726fd56ba7fde6f81854ed048c5e3c75d0393c</id>
<content type='text'>
DiscIO: Use views::keys</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
DiscIO: Use views::keys</pre>
</div>
</content>
</entry>
<entry>
<title>GCZ: use 64-bit for m_data_offset</title>
<updated>2026-07-28T07:44:49+00:00</updated>
<author>
<name>Scott Mansell</name>
<email>phiren@gmail.com</email>
</author>
<published>2026-07-26T10:22:18+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=4782a04c2032e02ba7785b1378036ba30d579ce9'/>
<id>4782a04c2032e02ba7785b1378036ba30d579ce9</id>
<content type='text'>
A malicious GCZ file could probably force this to be negative.
Shouldn't cause any issues other than file read failures, but need to fix
because it is causing errors on MSVC.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
A malicious GCZ file could probably force this to be negative.
Shouldn't cause any issues other than file read failures, but need to fix
because it is causing errors on MSVC.
</pre>
</div>
</content>
</entry>
<entry>
<title>GCZ: validate while loading</title>
<updated>2026-07-28T07:44:49+00:00</updated>
<author>
<name>Scott Mansell</name>
<email>phiren@gmail.com</email>
</author>
<published>2026-07-26T08:20:08+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=feeb36bf07a187175232340e2e4d8a00d226fca0'/>
<id>feeb36bf07a187175232340e2e4d8a00d226fca0</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>GCZ: Don't trust block_num either</title>
<updated>2026-07-28T07:44:49+00:00</updated>
<author>
<name>Scott Mansell</name>
<email>phiren@gmail.com</email>
</author>
<published>2026-07-26T06:15:07+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=ffb0e2c59406c485a983098ad5bd85f8b3ae376e'/>
<id>ffb0e2c59406c485a983098ad5bd85f8b3ae376e</id>
<content type='text'>
SectorReader::ReadChunk does do some validation on it, but it only
checks against the original disc size (reported by the GCZ file).
It has no idea how many blocks the header claimed the disc had.

A maliciously crafted GCZ file could trigger read overflows off the end
of the m_block_pointers/m_hashes arrays.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
SectorReader::ReadChunk does do some validation on it, but it only
checks against the original disc size (reported by the GCZ file).
It has no idea how many blocks the header claimed the disc had.

A maliciously crafted GCZ file could trigger read overflows off the end
of the m_block_pointers/m_hashes arrays.
</pre>
</div>
</content>
</entry>
<entry>
<title>GCZ: Don't trust GetBlockCompressedSize</title>
<updated>2026-07-28T07:44:49+00:00</updated>
<author>
<name>Scott Mansell</name>
<email>phiren@gmail.com</email>
</author>
<published>2026-07-26T06:13:13+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=a3740b5f713eb6a93981690fd52789a02ab8127d'/>
<id>a3740b5f713eb6a93981690fd52789a02ab8127d</id>
<content type='text'>
It comes unverified from the file, and a maliciously crafted file could
trigger not one, but two buffer overflows in the heap.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
It comes unverified from the file, and a maliciously crafted file could
trigger not one, but two buffer overflows in the heap.
</pre>
</div>
</content>
</entry>
<entry>
<title>DirectoryBlob: Resolve reorder warning</title>
<updated>2026-07-25T03:19:26+00:00</updated>
<author>
<name>Joshua Vandaële</name>
<email>joshua@vandaele.software</email>
</author>
<published>2026-07-15T13:31:44+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=69527ec44ba85625512a5aef16da785cab1c8573'/>
<id>69527ec44ba85625512a5aef16da785cab1c8573</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #14732 from khang06/small-tmd-check</title>
<updated>2026-07-15T20:08:12+00:00</updated>
<author>
<name>Admiral H. Curtiss</name>
<email>pikachu025@gmail.com</email>
</author>
<published>2026-07-15T20:08:12+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=81402ca6aa93503be38736b5dd6d8d96fcbfd0d5'/>
<id>81402ca6aa93503be38736b5dd6d8d96fcbfd0d5</id>
<content type='text'>
IOS/ES: Prevent reading TMDs that are too small</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
IOS/ES: Prevent reading TMDs that are too small</pre>
</div>
</content>
</entry>
<entry>
<title>IOS/ES: Prevent reading TMDs that are too small</title>
<updated>2026-07-15T06:12:31+00:00</updated>
<author>
<name>Khang</name>
<email>khang06@users.noreply.github.com</email>
</author>
<published>2026-07-15T06:12:31+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=900febec29bcfee8b7a1319ec74d9cb1bfb9d157'/>
<id>900febec29bcfee8b7a1319ec74d9cb1bfb9d157</id>
<content type='text'>
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
</pre>
</div>
</content>
</entry>
<entry>
<title>Merge pull request #14705 from JosJuice/directoryblob-dtk-comment</title>
<updated>2026-07-14T20:52:09+00:00</updated>
<author>
<name>Dentomologist</name>
<email>dentomologist@gmail.com</email>
</author>
<published>2026-07-14T20:52:09+00:00</published>
<link rel='alternate' type='text/html' href='https://git.dog6.net/dolphin/commit/?id=d3b2943807dd0073f7767947466dd73cccfef319'/>
<id>d3b2943807dd0073f7767947466dd73cccfef319</id>
<content type='text'>
DiscIO: Add DTK alignment comment in DirectoryBlob</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
DiscIO: Add DTK alignment comment in DirectoryBlob</pre>
</div>
</content>
</entry>
</feed>
