ioq3/code/client
Mickaël Thomas 84daa28267 Fix memory corruption in S_TransferPaintBuffer
When using a non-default sound configuration (such as 6 channels), after
a long time (about 4.5hours for 6 channels at 22050 Hz) an overflow will
occur in `S_TransferPaintBuffer`, causing an out of bounds write into
the dma buffer.

The problematic line is:
```
out_idx = (s_paintedtime * dma.channels) % dma.samples;
```

With `s_paintedtime` large enough, the result of the multiplication will
overflow to a negative number (since `s_paintedtime` is signed), and the
index into the output buffer will be negative.
2021-12-08 18:46:58 +00:00
..
cl_avi.c Support SDL audio devices that require float32 samples. 2018-04-13 14:05:12 -04:00
cl_cgame.c Correct spelling mistakes. 2017-11-22 01:40:20 -06:00
cl_cin.c Fix shift into sign in cl_cin.c 2018-04-08 21:41:31 -05:00
cl_console.c Add con_autochat and con_autoclear cvars 2017-06-08 15:46:19 -05:00
cl_curl.c Maximize cURL buffer size 2018-04-08 22:40:37 -05:00
cl_curl.h Update internal curl to 7.54.0 2017-07-28 16:32:22 +01:00
cl_input.c Correct spelling mistakes. 2017-11-22 01:40:20 -06:00
cl_keys.c Allow binds to use hex values for all key codes 2018-09-30 14:40:02 -05:00
cl_main.c Fix PRINT_ERROR print level missing from CL_RefPrintf 2019-04-15 23:13:36 -05:00
cl_net_chan.c - Improve snapshot rate and data rate control 2011-07-13 17:11:30 +00:00
cl_parse.c Fix fs_game '..' reading outside of home and base path 2018-01-21 06:02:28 -06:00
cl_scrn.c don't clear screen during CA_LOADING and CA_PRIMED 2014-01-23 13:44:36 -08:00
cl_ui.c Don't register fs_game cvar everywhere just to get the value 2018-01-21 06:02:08 -06:00
client.h Only allow connectionless print/echo from server/rcon address 2017-06-10 19:15:26 -05:00
keycodes.h Better gamepad support. 2016-08-08 02:36:10 -07:00
keys.h * Don't apply colour escape chars on input fields 2007-09-21 10:35:24 +00:00
libmumblelink.c Ensure that mbstowcs does not overflow its buffer 2015-01-07 23:37:11 +00:00
libmumblelink.h update mumble link interface for version 1.2 2010-01-04 14:12:18 +00:00
qal.c Remove references to alDopplerVelocity 2014-02-22 18:06:04 -06:00
qal.h Fix Makefile for OSX 2016-06-12 17:17:33 -04:00
snd_adpcm.c Correct spelling mistakes. 2017-11-22 01:40:20 -06:00
snd_altivec.c Isolate the Altivec code so non-Altivec PPC targets can use the same binary. 2018-05-12 14:14:47 -04:00
snd_codec.c Add Ogg Opus support 2013-02-17 18:32:05 -06:00
snd_codec.h Add Ogg Opus support 2013-02-17 18:32:05 -06:00
snd_codec_ogg.c Support FS_SEEK_END and negative offset for zipped files in FS_Seek 2013-11-08 18:43:34 -06:00
snd_codec_opus.c Support FS_SEEK_END and negative offset for zipped files in FS_Seek 2013-11-08 18:43:34 -06:00
snd_codec_wav.c Bug 5094 - Code cleanup, patch by Zack Middleton and DevHC. Fixes unused-but-set gcc warnings 2011-07-29 12:27:00 +00:00
snd_dma.c Make s_info command display channels instead of stereo 2018-10-01 22:31:36 -05:00
snd_local.h Fix SDL audio playback with 16-bit stereo sound 2018-10-01 22:28:51 -05:00
snd_main.c Make s_useOpenAL be CVAR_LATCH 2018-05-01 16:18:44 -05:00
snd_mem.c Fix undefined behaviour due to shifting signed in snd_mem.c 2018-04-08 21:41:26 -05:00
snd_mix.c Fix memory corruption in S_TransferPaintBuffer 2021-12-08 18:46:58 +00:00
snd_openal.c Avoid srcList[-1] in snd_openal.c 2018-04-08 21:41:31 -05:00
snd_public.h REFACTOR [reletive -> relative] 2012-06-18 16:32:03 +00:00
snd_wavelet.c snd_wavelet: avoid undefined pointer below array bounds 2016-09-25 17:13:40 +01:00