From 11e30e945604fedb163b48f292fb120bccbc020d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Henrik=20Rydg=C3=A5rd?= <hrydgard@gmail.com>
Date: Mon, 28 Sep 2026 09:07:08 -0600
Subject: [PATCH] Serialize: Don't read past a savestate title without a
 terminator

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
---
 Common/Serialize/Serializer.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Common/Serialize/Serializer.cpp b/Common/Serialize/Serializer.cpp
index 86d2334bef..9e06b9ba04 100644
--- a/Common/Serialize/Serializer.cpp
+++ b/Common/Serialize/Serializer.cpp
@@ -363,7 +363,8 @@ CChunkFileReader::Error CChunkFileReader::LoadFileHeader(File::IOFile &pFile, SC
 		}
 
 		if (title) {
-			*title = titleFixed;
+			// Not necessarily terminated in the file.
+			*title = std::string(titleFixed, strnlen(titleFixed, sizeof(titleFixed)));
 		}
 
 		headerSize += 128;