diff options
| author | Acts1631 <acts1631kjv@proton.me> | 2026-07-19 21:28:01 -0400 |
|---|---|---|
| committer | OatmealDome <julian@oatmealdome.me> | 2026-08-10 22:47:43 -0400 |
| commit | 47bb60e56430a6d9fbb7341e2ff9367f3ec9a030 (patch) | |
| tree | 4b8e6a0ed3e4b850a0985a31b9df33f3084d964e /Source/Core/InputCommon/DynamicInputTextureManager.cpp | |
| parent | 690b51b396edd6cb260e4f5d40619ae776c3f68e (diff) | |
NetPlay: bound LZO decompression output
NetPlay save synchronization decoded remote LZO blocks with the unsafe
decoder and no output capacity. A malicious host could overflow a client
buffer with a block larger than its declared size.
Use the bounds-checking decoder, validate the declared output length, and
grow buffer results only after each checked block has been decoded.
Diffstat (limited to 'Source/Core/InputCommon/DynamicInputTextureManager.cpp')
0 files changed, 0 insertions, 0 deletions