panzone/sm-vita
1
0
Fork 0
Code Releases 1 Activity

RoomMainAsm_ScrollingSky reads OOB

Browse Source 
when layer1_y_pos is very small
This commit is contained in:
Snesrev
2023-03-14 17:00:22 +01:00
parent b7cbd28294
commit 5fc07a1407
3 changed files with 34 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/sm_80.c
View File

@@ -510,16 +510,14 @@ void NMI_ProcessVramWriteQueue(void) { // 0x808C83
gVramWriteEntry(vram_write_queue_tail)->size = 0;
WriteRegWord(DMAP1, 0x1801u);
for (int i = 0; ; i += 7) {
uint16 *v1 = (uint16 *)gVramWriteEntry(i);
if (!v1[0])
VramWriteEntry *e = gVramWriteEntry(i);
if (!e->size)
break;
WriteRegWord(DAS1L, v1[0]);
WriteRegWord(A1T1L, v1[1]);
WriteRegWord(A1T1H, *(uint16 *)((char *)v1 + 3));
v3 = *(uint16 *)((char *)v1 + 5);
uint16 v2 = (sign16(v3)) ? 129 : 128;
WriteRegWord(VMAIN, v2);
WriteRegWord(VMADDL, v3);
WriteRegWord(DAS1L, e->size);
WriteRegWord(A1T1L, e->src.addr);
WriteReg(A1B1, e->src.bank);
WriteRegWord(VMAIN, sign16(e->vram_dst) ? 0x81 : 0x80);
WriteRegWord(VMADDL, e->vram_dst);
WriteReg(MDMAEN, 2u);
}
}