mirror of
https://github.com/THZoria/NX_Firmware.git
synced 2025-07-27 00:23:57 +02:00
Created Firmware 20.0.1 (markdown)
20
Firmware-20.0.1.md
Normal file
20
Firmware-20.0.1.md
Normal file
@@ -0,0 +1,20 @@
|
|||||||
|
# System Titles
|
||||||
|
|
||||||
|
The following titles were updated:
|
||||||
|
Sysmodules: ns.
|
||||||
|
[NPDM](https://switchbrew.org/wiki/NPDM) changes (besides usual version-bump): none.
|
||||||
|
|
||||||
|
RomFs changes:
|
||||||
|
|
||||||
|
[SystemVersion](https://switchbrew.org/wiki/System_Version_Title): All files updated.
|
||||||
|
|
||||||
|
# IPC Interface Changes
|
||||||
|
|
||||||
|
No changes.
|
||||||
|
|
||||||
|
# [ns](https://switchbrew.org/wiki/NS_services)
|
||||||
|
|
||||||
|
The only changed function was L_dce70.
|
||||||
|
This function iterates through "tmpCache" and attempts to shrink all JPEG images with [ShrinkJpegEx](https://switchbrew.org/wiki/Jpegdec_services#ShrinkJpegEx) in a loop.
|
||||||
|
However, the objects holding the JPEG file context were being freed unconditionally which resulted in passing invalid arguments (use-after-free) to [ShrinkJpegEx](https://switchbrew.org/wiki/Jpegdec_services#ShrinkJpegEx) which, in turn, would return the error code 0x7EECE (2206-1015) which the function would then blindly return back.
|
||||||
|
The issue was fixed by first no longer blindly return the error code returned by [ShrinkJpegEx](https://switchbrew.org/wiki/Jpegdec_services#ShrinkJpegEx) and then properly implementing the conditions that lead to freeing the JPEG file objects.
|
Reference in New Issue
Block a user