diff options
| author | Acts1631 <acts1631kjv@proton.me> | 2026-10-04 16:34:42 -0400 |
|---|---|---|
| committer | Acts1631 <acts1631kjv@proton.me> | 2026-10-04 16:53:57 -0400 |
| commit | f5438ce0c37fd16235af6a054775cf9d3af15e5d (patch) | |
| tree | 5f30ab96e7c5973a86e5c420f2f1734cd4ab78e0 /Source/Core/VideoBackends/Software/SWPixelEngine.cpp | |
| parent | eb236466c4f0ec8bef619add0972353d3996fe6c (diff) | |
VideoCommon: validate restored FIFO pointers
Save states restored video FIFO pointers from unchecked offsets. A
crafted offset could place a pointer outside its backing allocation and
turn the next gather-pipe copy into an out-of-bounds native write.
Require pointer offsets to stay within their backing array and reject a
state when either offset is invalid or the read pointer follows the write
pointer.
Diffstat (limited to 'Source/Core/VideoBackends/Software/SWPixelEngine.cpp')
0 files changed, 0 insertions, 0 deletions