diff options
| author | Scott Mansell <phiren@gmail.com> | 2026-07-26 18:15:07 +1200 |
|---|---|---|
| committer | Scott Mansell <phiren@gmail.com> | 2026-07-28 19:44:49 +1200 |
| commit | ffb0e2c59406c485a983098ad5bd85f8b3ae376e (patch) | |
| tree | 7445a094f3d1f98ee7c7e1f6a9bcccd87f59e25d /Source/Core/UpdaterCommon/UpdaterCommon.cpp | |
| parent | a3740b5f713eb6a93981690fd52789a02ab8127d (diff) | |
GCZ: Don't trust block_num either
SectorReader::ReadChunk does do some validation on it, but it only
checks against the original disc size (reported by the GCZ file).
It has no idea how many blocks the header claimed the disc had.
A maliciously crafted GCZ file could trigger read overflows off the end
of the m_block_pointers/m_hashes arrays.
Diffstat (limited to 'Source/Core/UpdaterCommon/UpdaterCommon.cpp')
0 files changed, 0 insertions, 0 deletions