fte/quakespasm
2
0
Fork 0
mirror of https://github.com/Shpoike/Quakespasm.git synced 2025-02-10 09:41:09 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix possible networked out-of-bounds access.

Browse source
This commit is contained in:
Spike 2018-07-19 22:02:25 +01:00 committed by Shpoike
parent f117e246b4
commit b1c679f772
1 changed files with 5 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
Quake/cl_parse.c
View file

@ -1430,7 +1430,7 @@ static void CL_ParseUpdate (int bits)
{ {
int i; int i;
qmodel_t *model; qmodel_t *model;
int modnum; unsigned int modnum;
qboolean forcelink; qboolean forcelink;
entity_t *ent; entity_t *ent;
int num; int num;
@ -1575,7 +1575,11 @@ static void CL_ParseUpdate (int bits)
if (bits & U_FRAME2) if (bits & U_FRAME2)
ent->frame = (ent->frame & 0x00FF) | (MSG_ReadByte() << 8); ent->frame = (ent->frame & 0x00FF) | (MSG_ReadByte() << 8);
if (bits & U_MODEL2) if (bits & U_MODEL2)
{
modnum = (modnum & 0x00FF) | (MSG_ReadByte() << 8); modnum = (modnum & 0x00FF) | (MSG_ReadByte() << 8);
if (modnum >= MAX_MODELS)
Host_Error ("CL_ParseModel: bad modnum");
}
if (bits & U_LERPFINISH) if (bits & U_LERPFINISH)
{ {
ent->lerpfinish = ent->msgtime + ((float)(MSG_ReadByte()) / 255); ent->lerpfinish = ent->msgtime + ((float)(MSG_ReadByte()) / 255);