6,263
edits
Changes
Jump to navigation
Jump to search
Line 154:
Line 154: + + + + + + + + + + + +
→System applets
|
|
| January 3, 2015
| January 3, 2015
| [[User:Yellows8|Yellows8]]
|-
| [[Home Menu]] extdata SaveData.dat loading buffer overflow
| ''This was not tested on hardware.''
The extdata SaveData.dat file-reading code allocates a fixed-size heap buffer for the expected SaveData.dat filesize, then reads the filedata into this buffer using the actual FS filesize. Before v5.0 the filesize used here wasn't validated, hence if the filesize is larger than alloc_size a buffer overflow would occur.
It's unknown whether v5.0 had similar changes for other extdata file-loading code.
| [[5.0.0-11|5.0.0-X]]
|
| June 9, 2016
| June 9, 2016
| [[User:Yellows8|Yellows8]]
| [[User:Yellows8|Yellows8]]
|-
|-