9879deca69
LibAtrac9 read its bitstream without a length, so a corrupt ATRAC9 frame
made the decoder read past the end of the guest's buffer. Update the
submodule to 946e05a ("Prevent bitstream overruns"), whose decode
functions take the buffer size, and pass the bytes left in the
superframe from NGS2, AJM and Audiodec. The callers already reject a
frame that consumes more than the superframe holds.
ngs2_atrac9 places a synthetic corrupt superframe right before an
inaccessible page and expects the render to report the decode failure;
with the previous LibAtrac9 it crashes with a segmentation fault.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01R5WJS4ZdQynAJesCZKH5hb
|
||
|---|---|---|
| .. | ||
| LibAtrac9@946e05a921 | ||
| SDL2@4b69833bc5 | ||
| SPIRV-Headers@01e0577914 | ||
| SPIRV-Tools@7f2d9ee926 | ||
| Vulkan-Headers@2fa203425e | ||
| VulkanMemoryAllocator@a1d434708c | ||
| ffmpeg-core@9ac4cfd195 | ||
| freetype@42608f77f2 | ||
| glslang@ba1640446f | ||
| stb@2c980bb598 | ||