{"action":"opened","issue":{"url":"https://api.github.com/repos/libretro/Genesis-Plus-GX/issues/95","repository_url":"https://api.github.com/repos/libretro/Genesis-Plus-GX","labels_url":"https://api.github.com/repos/libretro/Genesis-Plus-GX/issues/95/labels{/name}","comments_url":"https://api.github.com/repos/libretro/Genesis-Plus-GX/issues/95/comments","events_url":"https://api.github.com/repos/libretro/Genesis-Plus-GX/issues/95/events","html_url":"https://github.com/libretro/Genesis-Plus-GX/issues/95","id":248907451,"number":95,"title":"Buffer overflow when booting a Mega CD game","user":{"login":"bparker06","id":2433242,"avatar_url":"https://avatars1.githubusercontent.com/u/2433242?v=4","gravatar_id":"","url":"https://api.github.com/users/bparker06","html_url":"https://github.com/bparker06","followers_url":"https://api.github.com/users/bparker06/followers","following_url":"https://api.github.com/users/bparker06/following{/other_user}","gists_url":"https://api.github.com/users/bparker06/gists{/gist_id}","starred_url":"https://api.github.com/users/bparker06/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bparker06/subscriptions","organizations_url":"https://api.github.com/users/bparker06/orgs","repos_url":"https://api.github.com/users/bparker06/repos","events_url":"https://api.github.com/users/bparker06/events{/privacy}","received_events_url":"https://api.github.com/users/bparker06/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-08-09T03:34:00Z","updated_at":"2017-08-09T03:34:00Z","closed_at":null,"body":"I can hear the bios background music for a split second and then it crashes:\r\n\r\n```\r\n==17034==ERROR: AddressSanitizer: global-buffer-overflow on address 0x7f643c1299f6 at pc 0x7f643c07d566 bp 0x7fffd57e4f70 sp 0x7fffd57e4f60\r\nREAD of size 2 at 0x7f643c1299f6 thread T0\r\n    #0 0x7f643c07d565 in cdd_process core/cd_hw/cdd.c:1544\r\n    #1 0x7f643c08b378 in scd_write_word core/cd_hw/scd.c:1287\r\n    #2 0x7f643bfd4b9c in m68ki_write_16 core/m68k/m68kcpu.h:899\r\n    #3 0x7f643c00bf23 in m68k_op_move_16_pi_pi core/m68k/m68kops.h:12164\r\n    #4 0x7f643c0415cb in s68k_run core/m68k/s68kcpu.c:260\r\n    #5 0x7f643c08e1cc in scd_update core/cd_hw/scd.c:1631\r\n    #6 0x7f643bf16fd2 in system_frame_scd core/system.c:998\r\n    #7 0x7f643c1003cd in retro_run libretro/libretro.c:2221\r\n    #8 0x41acde in core_run /home/bp/RetroArch-bp/RetroArch/core_impl.c:415\r\n    #9 0x423209 in runloop_iterate /home/bp/RetroArch-bp/RetroArch/retroarch.c:3076\r\n    #10 0x4181ca in rarch_main frontend/frontend.c:131\r\n    #11 0x418300 in main frontend/frontend.c:151\r\n    #12 0x7f6445851439 in __libc_start_main ../csu/libc-start.c:295\r\n    #13 0x40f279 in _start (/home/bp/RetroArch-bp/RetroArch/retroarch+0x40f279)\r\n\r\n0x7f643c1299f6 is located 50 bytes to the right of global variable 'lut_BCD_8' defined in 'core/cd_hw/cdd.c:53:20' (0x7f643c129960) of size 100\r\n0x7f643c1299f6 is located 10 bytes to the left of global variable 'lut_BCD_16' defined in 'core/cd_hw/cdd.c:67:21' (0x7f643c129a00) of size 200\r\nSUMMARY: AddressSanitizer: global-buffer-overflow core/cd_hw/cdd.c:1544 in cdd_process\r\nShadow bytes around the buggy address:\r\n  0x0fed0781d2e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 f9\r\n  0x0fed0781d2f0: f9 f9 f9 f9 00 00 00 00 00 00 00 00 00 00 00 00\r\n  0x0fed0781d300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\r\n  0x0fed0781d310: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\r\n  0x0fed0781d320: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\r\n=>0x0fed0781d330: 00 00 00 00 00 00 00 00 04 f9 f9 f9 f9 f9[f9]f9\r\n  0x0fed0781d340: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\r\n  0x0fed0781d350: 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9\r\n  0x0fed0781d360: 00 00 00 00 00 02 f9 f9 f9 f9 f9 f9 00 00 00 00\r\n  0x0fed0781d370: 00 00 00 00 00 00 00 00 00 f9 f9 f9 f9 f9 f9 f9\r\n  0x0fed0781d380: 00 00 00 00 00 00 00 04 f9 f9 f9 f9 00 00 00 00\r\nShadow byte legend (one shadow byte represents 8 application bytes):\r\n  Addressable:           00\r\n  Partially addressable: 01 02 03 04 05 06 07 \r\n  Heap left redzone:       fa\r\n  Freed heap region:       fd\r\n  Stack left redzone:      f1\r\n  Stack mid redzone:       f2\r\n  Stack right redzone:     f3\r\n  Stack after return:      f5\r\n  Stack use after scope:   f8\r\n  Global redzone:          f9\r\n  Global init order:       f6\r\n  Poisoned by user:        f7\r\n  Container overflow:      fc\r\n  Array cookie:            ac\r\n  Intra object redzone:    bb\r\n  ASan internal:           fe\r\n  Left alloca redzone:     ca\r\n  Right alloca redzone:    cb\r\n==17034==ABORTING\r\n```"}}
{"actor":{"display_login":"bparker06"}}