Henrik Rydgård 788150c28e Fix out-of-bounds reads in PGF font parsing ...

PGF::ReadPtr walked four length-prefixed tables and computed table sizes
before any bounds check, and used signed 32-bit size math that could
overflow, allowing a crafted font to read past the input buffer.

- Validate the total size of all tables up front using 64-bit math.
- Check the rev3 extra header fits before reading it.
- Cap charPointerLength/charMapLength/shadowMapLength to avoid absurd
  allocations.
- Bounds-check glyph data offsets before reading each glyph.

Also throw in a warning fix

2026-08-01 11:57:27 +02:00

..

Debugger

Add memory.search and hle.data.* to the WebSocket debugger

2026-07-26 21:17:09 +02:00

Dialog

Fix out-of-bounds reads in PARAM.SFO parser

2026-07-31 20:54:17 +02:00

ELF

Fix out-of-bounds reads in PARAM.SFO parser

2026-07-31 20:54:17 +02:00

FileLoaders

Clamp HTTP response body to the requested range in HTTPFileLoader

2026-08-01 11:57:27 +02:00

FileSystems

Fix LZRC decompressor heap overflow and add unit test

2026-07-31 20:54:13 +02:00

Font

Fix out-of-bounds reads in PGF font parsing

2026-08-01 11:57:27 +02:00

HLE

Fix out-of-bounds reads in PGF font parsing

2026-08-01 11:57:27 +02:00

HW

Buildfixes, dependency shuffling to make things more logical

2026-07-24 14:43:34 +02:00

MIPS

Same as GermanAizek's #21912, but using an existing function.

2026-07-13 11:25:37 +02:00

Util

Fix integer overflow in PMF video frame buffer allocation

2026-08-01 11:57:27 +02:00

AVIDump.cpp

Remove the GPUDebugInterface class

2026-06-02 11:15:08 +02:00

AVIDump.h

…

CMakeLists.txt

Fix build when USE_SYSTEM_MINIUPNPC cmake option is enabled. Adding a compile definition for it in Core/CMakeLists.txt is not enough; rather than add a duplicate definition in UI/CMakeLists.txt so NativeApp.cpp's include of Core/Util/PortManager.h handles the conditional location of miniupnpc headers correctly, adding it once in the root CMakeLists.txt ensures both Core and UI handle it properly

2026-07-26 13:10:50 -07:00

CmdLine.cpp

Add --print-equal-lines option to headless, good for context when looking at output

2026-07-29 18:55:00 +02:00

CmdLine.h

Add --print-equal-lines option to headless, good for context when looking at output

2026-07-29 18:55:00 +02:00

Compatibility.cpp

Return of "Disable range culling" but now only as a compat.ini setting to enhance games

2026-06-27 13:02:47 +02:00

Compatibility.h

Return of "Disable range culling" but now only as a compat.ini setting to enhance games

2026-06-27 13:02:47 +02:00

Config.cpp

Add new log category for config

2026-07-30 10:03:15 +02:00

Config.h

Claude's crazy exception handler hack

2026-07-27 23:41:13 +02:00

ConfigSettings.cpp

Core/UI: use clear() and empty() for std containers

2026-05-17 21:28:31 +03:00

ConfigSettings.h

…

ConfigValues.h

Add command line parameters for controlling the behavior on memory/instruction exceptions

2026-07-27 18:37:26 +02:00

ControlMapper.cpp

Don't have pauseTrigger as an output parameter from ControlMapper::Key()

2026-06-16 10:57:52 +02:00

ControlMapper.h

Don't have pauseTrigger as an output parameter from ControlMapper::Key()

2026-06-16 10:57:52 +02:00

Core.cpp

Use the new kernel module description thing to annotate GPRs in the register viewer

2026-07-28 00:15:41 +02:00

Core.h

Add command line parameters for controlling the behavior on memory/instruction exceptions

2026-07-27 18:37:26 +02:00

Core.vcxproj

Move Common/GraphicsContext.h to Common/GPU/GraphicsContext.h

2026-07-26 13:58:17 +02:00

Core.vcxproj.filters

Move Common/GraphicsContext.h to Common/GPU/GraphicsContext.h

2026-07-26 13:58:17 +02:00

CoreParameter.h

Headless improvements

2026-07-29 16:27:33 +02:00

CoreTiming.cpp

Build and warning fixes

2026-06-12 17:28:52 +02:00

CoreTiming.h

Clean up logging in scePowerSetClockFrequency

2026-06-12 12:23:36 +02:00

CwCheat.cpp

Also support the "Post-comment" syntax used by cheats.db for comments

2026-04-24 14:41:47 +02:00

CwCheat.h

Also support the "Post-comment" syntax used by cheats.db for comments

2026-04-24 14:41:47 +02:00

EmuThread.cpp

Move Common/GraphicsContext.h to Common/GPU/GraphicsContext.h

2026-07-26 13:58:17 +02:00

EmuThread.h

Use the new common RunMainLoop on Android

2026-07-26 13:42:16 +02:00

FFMPEGCompat.h

…

FrameTiming.cpp

…

FrameTiming.h

…

HDRemaster.cpp

…

HDRemaster.h

…

Instance.cpp

…

Instance.h

…

KeyMap.cpp

Search: Skip spaces and control characters, code cleanup, fix minor issue on desktop

2026-05-11 11:45:04 +02:00

KeyMap.h

Add a "hold" version of the axis swap toggle. Often more convenient.

2026-03-05 23:05:35 +01:00

KeyMapDefaults.cpp

Add some bindings for the right analog stick by default (for right-stick patches)

2026-06-03 18:49:10 +02:00

KeyMapDefaults.h

…

Loaders.cpp

Unbreak loading homebrew. Followup to #21894, oops

2026-07-08 19:32:37 +02:00

Loaders.h

Improve error checking on game launch.

2026-07-08 12:04:15 +02:00

LuaContext.cpp

…

LuaContext.h

…

MemFault.cpp

Use the new kernel module description thing to annotate GPRs in the register viewer

2026-07-28 00:15:41 +02:00

MemFault.h

…

MemMap.cpp

…

MemMap.h

Fix behavior so we can turn off "IgnoreBadMemAccess" in headless

2026-07-29 18:38:25 +02:00

MemMapFunctions.cpp

Fix a bunch of possible crashes due to our VRAM check thinking that VRAM in kernel space is valid (but nothing is mapped there, unless you use masked memory)

2026-07-27 23:44:14 +02:00

MemMapHelpers.h

…

Opcode.h

…

PSPLoaders.cpp

Skip savestate migration if game ID strings contain a path separator

2026-08-01 11:41:24 +02:00

PSPLoaders.h

Headless improvements

2026-07-29 16:27:33 +02:00

Replay.cpp

…

Replay.h

…

Reporting.cpp

…

Reporting.h

…

RetroAchievements.cpp

Fix unnecessary RAIntegration error message if you have the DLL but RA is disabled

2026-07-28 00:16:12 +02:00

RetroAchievements.h

RAIntegration crashfix

2026-07-27 18:37:28 +02:00

SaveState.cpp

Add bounds checking to savestate deserialization

2026-08-01 11:57:24 +02:00

SaveState.h

Code cleanup for save state notification, add metadata field

2026-05-19 11:07:07 +02:00

SaveStateRewind.cpp

SaveState: Show time/date when loading states

2026-05-19 12:19:40 +02:00

SaveStateRewind.h

Show timestamps when loading rewind states

2026-05-19 11:58:01 +02:00

Screenshot.cpp

Remove the concept of scaled/offset depth buffers.

2026-06-10 10:41:30 +02:00

Screenshot.h

…

System.cpp

Headless improvements

2026-07-29 16:27:33 +02:00

System.h

…

TiltEventProcessor.cpp

…

TiltEventProcessor.h

…

WaveFile.cpp

…

WaveFile.h

…

WebServer.cpp

Fix upload filename traversal

2026-07-23 15:04:04 -04:00

WebServer.h

…

x360_compat.h

…