Yes, I meant 0.139, and the "out of memory" problem was that I had stored the CHDs in ZIP files (because some of them compress really well), and I had forgotten to extract them first. However, the crash indicates that MAME is vulnerable to memory corruption that could result in the execution of arbitrary code. In the gamecstl case, there's a memory allocation overflow condition when the .zip file size exceeds 4Gb, but you don't need such a large file to demonstrate problems in the zip handling.
|