docs: sync changelog and site with v1.70.1-v1.70.4

docs/CHANGELOG.md and the site were still describing v1.70 even though
the shipped release (and the code just merged from fix/v1.70.4) is
1.70.4. Adds the missing 1.70.1-1.70.4 entries (config self-heal, the
GTA: Liberty City Stories allocator crash fix, crash recovery, and the
#29-#38 audit pass), bumps version.h's VER_STR/VER_PATCH, and updates
every version reference and the ticker banner across the site. Also
documents the makefile consolidation and new host-side test suite on
the developer build page.

Author: abduznik

docs/CHANGELOG.md

@@ -1,3 +1,63 @@
+## 1.70.4
+
+### Fixed
+
+ * Audit pass covering ten numbered issues (#29-#38):
+   * Rewrote `real_address` so the result is always within VRAM (0x04000000-0x041FFFFF) or the
+     configured `[address_start, address_end]` window; moved to a shared `addr.h` header.
+   * Fixed a scroll-window pointer bug in `get_print_start_end`.
+   * `language_load` now clamps the firmware language id before indexing.
+   * `language_process_buffer` is now bounds-checked and falls back to built-in English on a
+     truncated/malformed language file.
+   * Fixed an undefined-behavior overlapping `snprintf` src/dst in the on-screen keyboard.
+   * `fileIoWrite` now flushes before the buffered write can overflow its heap buffer (previously
+     only flushed past 8128 bytes, allowing writes up to ~16319 bytes into an 8192-byte buffer).
+   * Cheat file loading now caps `.db`/`.txt` files at 32MB and validates PSPAR game/item headers
+     before trusting their counts.
+
+### Changed
+
+ * Config validation/recovery (checksum + field clamping) is now shared between the plugin and a
+   new host-side test suite via `config_core.h`.
+ * Consolidated `makefile_psp`/`makefile_lite` into one parameterized `src/makefile`
+   (`VARIANT=psp|lite`); the old makefile names remain as thin shims.
+ * Added host-side unit tests (`tests/`) that compile and exercise the real shared address/config
+   logic without needing the PSP SDK, wired into CI.
+
+## 1.70.3
+
+### Added
+
+ * Crash recovery: a kernel plugin can't know a game crashed in the moment, but it can tell the
+   previous session didn't exit cleanly (a clean exit unloads the plugin via `module_stop`; a
+   crash doesn't). A lifecycle marker file is now set when a game session starts and cleared on
+   clean exit. If the marker is still set at boot, all always-on and selected cheats are
+   automatically disabled and saved, and a crash-safe notice is shown briefly on the cheat list.
+
+## 1.70.2
+
+### Fixed
+
+ * Fixed a crash in GTA: Liberty City Stories at asset load, caused by a memory allocator bug
+   introduced in 1.65: the partition-selection loop iterated one past the end of a 2-element
+   array, occasionally reading a garbage stack value that resolved to the wrong system memory
+   partition. Under memory pressure this could allocate from the game's own partitions instead of
+   the plugin's, stealing RAM the game needed at its asset-load peak. Restored the original
+   3-partition allocation list and made the allocator fail closed (return NULL) instead of falling
+   back to an unrestricted allocation when its preferred partitions are exhausted.
+
+## 1.70.1
+
+### Fixed
+
+ * `config_load` no longer wipes user settings back to defaults on a checksum mismatch against a
+   pre-v1.70 config file (which has no checksum field) — it now heals the checksum and memory
+   range in place instead, preventing an unconditional settings reset and cheat database
+   truncation.
+ * Widened the valid memory range for `memory_copy`, the PSPAR 0x0E patch code type, and
+   `patch_apply` to the PSP's actual writable footprint (VRAM through main RAM), which had
+   previously silently rejected legitimate VRAM cheat targets.
+
 ## 1.6.4 (2022-10-03)
 
 ### Fixed

site/changelog.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>
@@ -52,6 +52,59 @@
 
 <td class="maincol">
 
+  <table class="panel">
+    <tr><td class="panelhead">1.70.4 <span class="newflag">[current]</span></td></tr>
+    <tr><td class="panelbody">
+      <p><b>Fixed</b> &mdash; audit pass covering ten numbered issues (#29-#38):</p>
+      <ul>
+        <li>Rewrote <tt>real_address</tt> so the result is always within VRAM (0x04000000-0x041FFFFF) or the configured address window; moved to a shared <tt>addr.h</tt> header.</li>
+        <li>Fixed a scroll-window pointer bug in <tt>get_print_start_end</tt>.</li>
+        <li><tt>language_load</tt> now clamps the firmware language id before indexing.</li>
+        <li><tt>language_process_buffer</tt> is now bounds-checked and falls back to built-in English on a truncated/malformed language file.</li>
+        <li>Fixed an undefined-behavior overlapping <tt>snprintf</tt> src/dst in the on-screen keyboard.</li>
+        <li><tt>fileIoWrite</tt> now flushes before the buffered write can overflow its heap buffer (previously only flushed past 8128 bytes, allowing writes up to ~16319 bytes into an 8192-byte buffer).</li>
+        <li>Cheat file loading now caps .db/.txt files at 32MB and validates PSPAR game/item headers before trusting their counts.</li>
+      </ul>
+      <p><b>Changed:</b></p>
+      <ul>
+        <li>Config validation/recovery (checksum + field clamping) is now shared between the plugin and a new host-side test suite.</li>
+        <li>Consolidated makefile_psp/makefile_lite into one parameterized src/makefile (VARIANT=psp|lite); old names remain as shims.</li>
+        <li>Added host-side unit tests that compile and exercise the real shared address/config logic without needing the PSP SDK, wired into CI.</li>
+      </ul>
+    </td></tr>
+  </table>
+
+  <table class="panel">
+    <tr><td class="panelhead">1.70.3</td></tr>
+    <tr><td class="panelbody">
+      <p><b>Added:</b></p>
+      <ul>
+        <li>Crash recovery &mdash; a kernel plugin can't know a game crashed in the moment, but it can tell the previous session didn't exit cleanly (a clean exit unloads the plugin via module_stop; a crash doesn't). A lifecycle marker is now set when a game session starts and cleared on clean exit. If the marker is still set at boot, all always-on and selected cheats are automatically disabled and saved, with a crash-safe notice shown briefly on the cheat list.</li>
+      </ul>
+    </td></tr>
+  </table>
+
+  <table class="panel">
+    <tr><td class="panelhead">1.70.2</td></tr>
+    <tr><td class="panelbody">
+      <p><b>Fixed:</b></p>
+      <ul>
+        <li>Fixed a crash in GTA: Liberty City Stories at asset load, caused by a memory allocator bug introduced in 1.65: the partition-selection loop iterated one past the end of a 2-element array, occasionally reading a garbage value that resolved to the wrong system memory partition. Under memory pressure this could allocate from the game's own partitions instead of the plugin's, stealing RAM the game needed at its asset-load peak. Restored the original 3-partition allocation list and made the allocator fail closed instead of falling back to an unrestricted allocation.</li>
+      </ul>
+    </td></tr>
+  </table>
+
+  <table class="panel">
+    <tr><td class="panelhead">1.70.1</td></tr>
+    <tr><td class="panelbody">
+      <p><b>Fixed:</b></p>
+      <ul>
+        <li><tt>config_load</tt> no longer wipes user settings back to defaults on a checksum mismatch against a pre-v1.70 config file (which has no checksum field) &mdash; it now heals the checksum and memory range in place instead.</li>
+        <li>Widened the valid memory range for memory_copy, the PSPAR 0x0E patch code type, and patch_apply to the PSP's actual writable footprint (VRAM through main RAM), which had previously silently rejected legitimate VRAM cheat targets.</li>
+      </ul>
+    </td></tr>
+  </table>
+
   <table class="panel">
     <tr><td class="panelhead">1.6.4 <span style="font-weight:normal;">(2022-10-03)</span></td></tr>
     <tr><td class="panelbody">

site/credits.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>

site/dev-architecture.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>

site/dev-build.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>
@@ -87,7 +87,7 @@
     <tr><td class="panelbody">
       <p>There's a top-level <tt>makefile</tt> that orchestrates everything, plus per-binary makefiles in <tt>src/</tt> that PSPSDK's own build system (<tt>build.mak</tt>) consumes.</p>
       <p><b>makefile (repo root):</b></p>
-<pre class="code">export RELVER := 1.70
+<pre class="code">export RELVER := 1.70.4
 
 release:    prep psp lite pack clean
 release_pr: prep psppr litepr pack clean</pre>
@@ -100,14 +100,30 @@
         <tr><td><tt>pack</tt></td><td>Creates <tt>build/temp</tt>, copies <tt>src/resources/*</tt> (the seplugins folder structure users install) and <tt>docs/</tt> (end-user docs) into it, moves the built .prx files into <tt>build/temp/seplugins/TempAR</tt>, then zips the whole thing to <tt>build/tempar-$(RELVER).zip</tt>.</td></tr>
         <tr class="alt"><td><tt>clean</tt></td><td>Removes build artifacts: .elf/.prx outputs, objects/*.o, generated language headers, build/temp.</td></tr>
       </table>
-      <p><tt>release</tt> runs <tt>prep</tt>, builds both <tt>psp</tt> and <tt>lite</tt>, packs, then cleans. <b>RELVER must be bumped by hand</b> in this file for every release &mdash; it's also duplicated in <tt>src/include/version.h</tt> (<tt>VER_MAIN</tt>/<tt>VER_SUB</tt>) and must be kept in sync manually.</p>
+      <p><tt>release</tt> runs <tt>prep</tt>, builds both <tt>psp</tt> and <tt>lite</tt>, packs, then cleans. <b>RELVER must be bumped by hand</b> in this file for every release &mdash; it's also duplicated in <tt>src/include/version.h</tt> (<tt>VER_MAIN</tt>/<tt>VER_SUB</tt>/<tt>VER_PATCH</tt>) and must be kept in sync manually.</p>
+    </td></tr>
+  </table>
+
+  <table class="callout">
+    <tr><td class="callouthead">Makefile consolidation (v1.70.4)</td></tr>
+    <tr><td class="calloutbody">
+      <tt>src/makefile_psp</tt> and <tt>src/makefile_lite</tt> are no longer the real build logic
+      &mdash; both are now thin wrappers around one parameterized <tt>src/makefile</tt>:
+<pre class="code"># src/makefile_psp:
+VARIANT = psp
+include makefile</pre>
+      The real makefile is invoked as <tt>make -C src -f makefile VARIANT=psp|lite</tt> (default
+      <tt>psp</tt>). The old per-variant names still work unchanged from the top-level makefile's
+      perspective &mdash; nothing above this layer needed to change. If you're adding a new build
+      variant, add it to <tt>src/makefile</tt>'s <tt>VARIANT</tt> branching, not as a fourth
+      copy-pasted file.
     </td></tr>
   </table>
 
   <table class="panel">
     <tr><td class="panelhead">src/makefile_psp and src/makefile_lite</td></tr>
     <tr><td class="panelbody">
-      <p>These are real PSPSDK makefiles (they <tt>include $(PSPSDK)/lib/build.mak</tt> at the bottom, where all the actual compile/link rules live &mdash; these files only set variables).</p>
+      <p>These are now thin wrappers (see above) around <tt>src/makefile</tt>, which <tt>include $(PSPSDK)/lib/build.mak</tt> at the bottom, where all the actual compile/link rules live.</p>
       <p>Key variables and what changing them means:</p>
       <ul>
         <li><b>TARGET</b> &mdash; output PRX name (<tt>tempar</tt> / <tt>tempar_lite</tt>).</li>
@@ -149,10 +165,31 @@
     </td></tr>
   </table>
 
+  <table class="panel">
+    <tr><td class="panelhead">Host-Side Test Suite (tests/)</td></tr>
+    <tr><td class="panelbody">
+      <p>
+        As of v1.70.4, address-mapping and config-validation logic lives in shared headers
+        (<tt>addr.h</tt>, <tt>config_core.h</tt>) that compile both into the PRX and into standalone
+        host binaries &mdash; so the real logic can be unit-tested on any machine with a C compiler,
+        no PSP SDK or Docker required:
+      </p>
+<pre class="code">cd tests
+make run
+# == test_address ==
+# == test_config_core ==</pre>
+      <p>
+        This runs as its own <tt>host-tests</tt> CI job, separate from and before the Docker-based
+        PRX build. If you're touching address clamping or config validation, run this locally first
+        &mdash; it's much faster than a full Docker build cycle.
+      </p>
+    </td></tr>
+  </table>
+
   <table class="panel">
     <tr><td class="panelhead">CI (.github/workflows/build.yml)</td></tr>
     <tr><td class="panelbody">
-      <p>Triggers: push to main/master/feat/*, PRs into main/master, tag pushes (v*), and manual workflow_dispatch.</p>
+      <p>Triggers: push to main/master/feat/*, PRs into main/master, tag pushes (v*), and manual workflow_dispatch. Two jobs run: <tt>host-tests</tt> (the suite above) and <tt>build</tt> (the actual PRX build), independently.</p>
       <ol>
         <li><tt>docker run ... pspdev/pspdev make prep psp lite</tt> &mdash; builds both PRXs (does not run pack here, that's separate).</li>
         <li><tt>make pack</tt> on the runner directly (installs zip via apt first if missing).</li>

site/dev-cheat-engine.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>
@@ -138,6 +138,34 @@
         browser/decoder in real-address mode). If you're adding a new code type that touches
         memory, go through these functions rather than dereferencing pointers directly.
       </p>
+      <p>
+        Both ultimately call <tt>real_address()</tt>, which as of v1.70.4 lives in a shared,
+        SDK-independent header (<tt>src/include/addr.h</tt>) so it can be exercised by the
+        <a href="dev-build.html">host-side test suite</a> without a PSP toolchain:
+      </p>
+<pre class="code">static inline u32 real_address(u32 address) {
+    address &amp;= 0x0FFFFFFF;
+
+    // VRAM is a legal raw target even though it sits below cfg.address_start
+    if(address &gt;= 0x04000000 &amp;&amp; address &lt;= 0x041FFFFF) {
+        return address;
+    }
+    if(address &lt;= cfg.address_end - cfg.address_start) {
+        return address + cfg.address_start;   // relative offset into game memory
+    }
+    if(address &gt;= cfg.address_start &amp;&amp; address &lt;= cfg.address_end) {
+        return address;                        // already absolute, in range
+    }
+    // ambiguous gap value or above range - clamp to the nearest valid edge
+    return (address &lt; cfg.address_start) ? cfg.address_start : cfg.address_end;
+}</pre>
+      <p>
+        This was audit issue #36: the previous implementation could return an address outside VRAM
+        and outside <tt>[address_start, address_end]</tt> for certain edge-case inputs, which is
+        exactly the kind of thing the v1.70 security hardening pass (below) was meant to close off.
+        If you're touching this function, the host tests are the fast feedback loop &mdash; no need
+        to boot a PSP or emulator to verify a clamping change.
+      </p>
     </td></tr>
   </table>
 

site/dev-disasm-search.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>

site/dev-gotchas.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>

site/dev-menu-system.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>

site/dev-sdk-usage.html

@@ -24,7 +24,7 @@
 </td></tr>
 
 <tr><td class="ticker">
-  <marquee behavior="scroll" scrollamount="3">v1.70 is out now - CWCheat + PSPAR in one plugin - favorites &amp; persistence added - works on CFW only, not OFW - searcher up to 253x faster than the old MKUltra code - full changelog inside</marquee>
+  <marquee behavior="scroll" scrollamount="3">v1.70.4 is out now - crash recovery added - fixed a memory allocator bug that crashed GTA: Liberty City Stories - config self-heal - CWCheat + PSPAR in one plugin - works on CFW only, not OFW - full changelog inside</marquee>
 </td></tr>
 
 <tr><td>