Changes

594 bytes added ,  05:25, 10 June 2016
Line 154: Line 154:  
|  
 
|  
 
| January 3, 2015
 
| January 3, 2015
 +
| [[User:Yellows8|Yellows8]]
 +
|-
 +
| [[Home Menu]] extdata SaveData.dat loading buffer overflow
 +
| ''This was not tested on hardware.''
 +
 +
The extdata SaveData.dat file-reading code allocates a fixed-size heap buffer for the expected SaveData.dat filesize, then reads the filedata into this buffer using the actual FS filesize. Before v5.0 the filesize used here wasn't validated, hence if the filesize is larger than alloc_size a buffer overflow would occur.
 +
 +
It's unknown whether v5.0 had similar changes for other extdata file-loading code.
 +
| [[5.0.0-11|5.0.0-X]]
 +
|
 +
| June 9, 2016
 +
| June 9, 2016
 
| [[User:Yellows8|Yellows8]]
 
| [[User:Yellows8|Yellows8]]
 
|-
 
|-