Sprinter/mame
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fixed signed integer overflow in address_map::uplift_submaps() - by O. Galibert (nw)

Browse Source
This commit is contained in:
Oliver Stöneberg 2014-10-23 11:19:39 +02:00
parent f04db035c9
commit 8ddb5bab46
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
src/emu/addrmap.c
View File

@ -540,8 +540,8 @@ void address_map::uplift_submaps(running_machine &machine, device_t &device, dev
// Remap start and end // Remap start and end
int start_offset = subentry->m_addrstart / entry_bytes; unsigned int start_offset = subentry->m_addrstart / entry_bytes;
int start_slot = start_offset % slot_count; unsigned int start_slot = start_offset % slot_count;
subentry->m_addrstart = entry->m_addrstart + (start_offset / slot_count) * databytes; subentry->m_addrstart = entry->m_addrstart + (start_offset / slot_count) * databytes;
// Drop the entry if it ends up outside the range // Drop the entry if it ends up outside the range
@ -551,8 +551,8 @@ void address_map::uplift_submaps(running_machine &machine, device_t &device, dev
continue; continue;
} }
int end_offset = subentry->m_addrend / entry_bytes; unsigned int end_offset = subentry->m_addrend / entry_bytes;
int end_slot = end_offset % slot_count; unsigned int end_slot = end_offset % slot_count;
subentry->m_addrend = entry->m_addrstart + (end_offset / slot_count) * databytes + databytes - 1; subentry->m_addrend = entry->m_addrstart + (end_offset / slot_count) * databytes + databytes - 1;
// Clip the entry to the end of the range // Clip the entry to the end of the range