mirror of
https://github.com/dolphin-emu/dolphin.git
synced 2026-08-17 07:47:23 -05:00
a926974153
NetPlay save synchronization decoded remote LZO blocks with the unsafe decoder and no output capacity. A malicious host could overflow a client buffer with a block larger than its declared size. Use the bounds-checking decoder, validate the declared output length, and grow buffer results only after each checked block has been decoded.