reios: check boot file destination ptr before loading

flyinghead · flyinghead · commit 0491f2e6a56b · 2026-01-07T09:50:35.000+01:00
Abort load if ptr is null (size &gt; 0xff0000)
Fixes MINIDUMP-7W9 MINIDUMP-84B MINIDUMP-87V
diff --git a/core/reios/reios.cpp b/core/reios/reios.cpp
@@ -97,15 +97,20 @@ static bool reios_locate_bootfile(const char* bootfile)
 	}
 	bootSectors = size / 2048;
 
+	u8 *dest = GetMemPtr(0x8c010000, size);
+	if (dest == nullptr) {
+		ERROR_LOG(REIOS, "Boot file too large: %d", size);
+		return false;
+	}
 	if (descrambl)
 	{
 		std::vector<u8> buf(size);
 		bootFile->read(buf.data(), size, offset);
-		descrambl_buffer(buf.data(), GetMemPtr(0x8c010000, size), size);
+		descrambl_buffer(buf.data(), dest, size);
 	}
 	else
 	{
-		bootFile->read(GetMemPtr(0x8c010000, size), size, offset);
+		bootFile->read(dest, size, offset);
 	}
 
 	u8 data[24] = {0};

Original file line number	Diff line number	Diff line change
`@@ -97,15 +97,20 @@ static bool reios_locate_bootfile(const char* bootfile)`
`97`	`97`	`}`
`98`	`98`	`bootSectors = size / 2048;`
`99`	`99`
	`100`	`+ u8 *dest = GetMemPtr(0x8c010000, size);`
	`101`	`+ if (dest == nullptr) {`
	`102`	`+ ERROR_LOG(REIOS, "Boot file too large: %d", size);`
	`103`	`+ return false;`
	`104`	`+ }`
`100`	`105`	`if (descrambl)`
`101`	`106`	`{`
`102`	`107`	`std::vector<u8> buf(size);`
`103`	`108`	`bootFile->read(buf.data(), size, offset);`
`104`		`- descrambl_buffer(buf.data(), GetMemPtr(0x8c010000, size), size);`
	`109`	`+ descrambl_buffer(buf.data(), dest, size);`
`105`	`110`	`}`
`106`	`111`	`else`
`107`	`112`	`{`
`108`		`- bootFile->read(GetMemPtr(0x8c010000, size), size, offset);`
	`113`	`+ bootFile->read(dest, size, offset);`
`109`	`114`	`}`
`110`	`115`
`111`	`116`	`u8 data[24] = {0};`