diff options
| author | Acts1631 <acts1631kjv@proton.me> | 2026-10-04 16:34:34 -0400 |
|---|---|---|
| committer | Acts1631 <acts1631kjv@proton.me> | 2026-10-04 16:34:34 -0400 |
| commit | c987640440cd9fda480af384aac7c554869a0cfb (patch) | |
| tree | c2fd14c03402b3e839a57a2215a7969aee3a80f5 /Source/Core/VideoBackends/Software/SWPixelEngine.cpp | |
| parent | eb236466c4f0ec8bef619add0972353d3996fe6c (diff) | |
NetPlay: reject oversized Wii save banners
The save sync parser preserved an oversized banner length after limiting
the copy into the fixed header buffer. The NAND writer then used the
untrusted length and read beyond the stack object.
Reject invalid or oversized lengths before copying the banner.
Diffstat (limited to 'Source/Core/VideoBackends/Software/SWPixelEngine.cpp')
0 files changed, 0 insertions, 0 deletions