diff options
| author | Colin Snover | 2017-09-22 13:20:49 -0500 |
|---|---|---|
| committer | Colin Snover | 2017-09-23 20:37:51 -0500 |
| commit | 50cfb7ad46ff65ab038f4694bafb4d817ef8529e (patch) | |
| tree | 4bf047995c2b308babf8b0bf7ca357b0a3fe2442 /backends/platform/ds | |
| parent | d74e94950b0945b66a478063a65fdf645208bd9d (diff) | |
| download | scummvm-rg350-50cfb7ad46ff65ab038f4694bafb4d817ef8529e.tar.gz scummvm-rg350-50cfb7ad46ff65ab038f4694bafb4d817ef8529e.tar.bz2 scummvm-rg350-50cfb7ad46ff65ab038f4694bafb4d817ef8529e.zip | |
SCI32: Fix size for dereferencing non-raw SCI32 arrays
The maxSize given when generating a SegmentRef is supposed to be
the maximum size of raw data that can be held inside the offset-
part of a reg_t, not the entire size including the segment.
This fixes a buffer overflow in "Inside the Chest", which still
does not work, but at least doesn't cause heap overflows anymore
with this change.
Diffstat (limited to 'backends/platform/ds')
0 files changed, 0 insertions, 0 deletions