diff options
| author | Acts1631 <acts1631kjv@proton.me> | 2026-11-01 19:39:01 -0500 |
|---|---|---|
| committer | OatmealDome <julian@oatmealdome.me> | 2026-11-07 00:38:08 -0500 |
| commit | 0b8f943a7e9e8e494319c5c855c26bd0036f497d (patch) | |
| tree | c9e41a1208a517aadf8951b3543647a15960f6e1 /Source/Core/InputCommon/ControlReference/ExpressionParser.cpp | |
| parent | 254ae341ec29809a0fcec1f95ffe98da16f1524c (diff) | |
Core: bound legacy savestate LZO decompression
Legacy savestate headers controlled both the compressed input length
and the decompression buffer size. The input was read into a fixed-size
buffer without validation, and the unsafe LZO API could write past its
output buffer.
Use the legacy block size as the output capacity, reject oversized
compressed blocks, and use the bounds-checking LZO decompressor.
Diffstat (limited to 'Source/Core/InputCommon/ControlReference/ExpressionParser.cpp')
0 files changed, 0 insertions, 0 deletions