3 Commits

Include renames

Author	SHA1	Message	Date
Henrik RydgårdandClaude Opus 5.5	0a687b9435	Savestate: Bounds-check sizes from the file, and plug leaks on load ... Reject sizes past the end of the state before allocating (FPL, PGF, achievements, SAS grain, savedata list, the memory fast path), fail instead of desyncing on a SAS voice count mismatch, and free what old states' paths and shrinking pointer containers dropped. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>	2026-09-28 09:34:06 -06:00
Henrik RydgårdandClaude Sonnet 5	1eab737e4d	Serialize: guard List/Deque/Map/Set against corrupted size fields ... DoVector already rejects an attacker/corruption-controlled size that would resize far beyond what's actually left in the savestate buffer. DoList/DoDeque/DoMap/DoMultimap/DoSet never got the same treatment - a corrupted count field (e.g. 0xFFFFFFFF) drove an immediate huge resize (list/deque) or an unbounded loop of allocations (map/set) before any per-element bounds checking kicked in. All five now check the declared count against PointerWrap::Remaining() first. Co-Authored-By: Claude Sonnet 5 <[email protected]> Claude-Session: https://claude.ai/code/session_01L4QAoxV2KY7ek4PcZw3WvY	2026-08-10 01:00:28 +02:00
Unknown W. Brackets	b8342fb8ec	SaveState: Rename ChunkFile files to Serialize. ... Makes more sense and less weird than ChunkFileDoMap, etc.	2020-08-10 08:04:05 +00:00