DSiWare VulnList: Difference between revisions
No edit summary |
|||
| Line 9: | Line 9: | ||
! Status | ! Status | ||
! Description | ! Description | ||
|- | |- | ||
| FIZZ | | FIZZ | ||
| Line 33: | Line 28: | ||
| High-Scores | | High-Scores | ||
| No limit on length of drawn record names, no vuln with high-scores. The level var from savedata doesn't have any bounds check, this is used with array indexes. This is not exploitable since the array structs only contain char* strings and other fields. | | No limit on length of drawn record names, no vuln with high-scores. The level var from savedata doesn't have any bounds check, this is used with array indexes. This is not exploitable since the array structs only contain char* strings and other fields. | ||
|- | |||
| Dracula | |||
| No manual input | |||
| Savedata contains ASCII high-scores from DSi username, and ASCII perks/powerups. High-scores doesn't have string bugs. | |||
|} | |} | ||