vmu: avoid flashram buffer overflow

2019-11-03 17:08:34 +01:00 · 2019-11-03 17:08:34 +01:00 · b7dd8f16d4
parent b9970fc3da
commit b7dd8f16d4
1 changed files with 2 additions and 0 deletions
--- a/core/hw/maple/maple_devs.cpp
+++ b/core/hw/maple/maple_devs.cpp
@ -720,6 +720,8 @@ struct maple_sega_vmu: maple_base
 						u32 Phase = ((SWAP32(bph))>>16)&0xff;
 						u32 write_adr=Block*512+Phase*(512/4);
 						u32 write_len=r_count();
+						if (write_adr + write_len > sizeof(flash_data))
+							return MDRE_TransmitAgain; //invalid params
 						rptr(&flash_data[write_adr],write_len);

 						if (file)