Mickaël Thomas 84daa28267 Fix memory corruption in S_TransferPaintBuffer ... When using a non-default sound configuration (such as 6 channels), after a long time (about 4.5hours for 6 channels at 22050 Hz) an overflow will occur in `S_TransferPaintBuffer`, causing an out of bounds write into the dma buffer. The problematic line is: ``` out_idx = (s_paintedtime * dma.channels) % dma.samples; ``` With `s_paintedtime` large enough, the result of the multiplication will overflow to a negative number (since `s_paintedtime` is signed), and the index into the output buffer will be negative.		2021-12-08 18:46:58 +00:00
..
cl_avi.c	Support SDL audio devices that require float32 samples.	2018-04-13 14:05:12 -04:00
cl_cgame.c	Correct spelling mistakes.	2017-11-22 01:40:20 -06:00
cl_cin.c	Fix shift into sign in cl_cin.c	2018-04-08 21:41:31 -05:00
cl_console.c	Add con_autochat and con_autoclear cvars	2017-06-08 15:46:19 -05:00
cl_curl.c	Maximize cURL buffer size	2018-04-08 22:40:37 -05:00
cl_curl.h	Update internal curl to 7.54.0	2017-07-28 16:32:22 +01:00
cl_input.c	Correct spelling mistakes.	2017-11-22 01:40:20 -06:00
cl_keys.c	Allow binds to use hex values for all key codes	2018-09-30 14:40:02 -05:00
cl_main.c	Fix PRINT_ERROR print level missing from CL_RefPrintf	2019-04-15 23:13:36 -05:00
cl_net_chan.c	- Improve snapshot rate and data rate control	2011-07-13 17:11:30 +00:00
cl_parse.c	Fix fs_game '..' reading outside of home and base path	2018-01-21 06:02:28 -06:00
cl_scrn.c	don't clear screen during CA_LOADING and CA_PRIMED	2014-01-23 13:44:36 -08:00
cl_ui.c	Don't register fs_game cvar everywhere just to get the value	2018-01-21 06:02:08 -06:00
client.h	Only allow connectionless print/echo from server/rcon address	2017-06-10 19:15:26 -05:00
keycodes.h	Better gamepad support.	2016-08-08 02:36:10 -07:00
keys.h	* Don't apply colour escape chars on input fields	2007-09-21 10:35:24 +00:00
libmumblelink.c	Ensure that mbstowcs does not overflow its buffer	2015-01-07 23:37:11 +00:00
libmumblelink.h	update mumble link interface for version 1.2	2010-01-04 14:12:18 +00:00
qal.c	Remove references to alDopplerVelocity	2014-02-22 18:06:04 -06:00
qal.h	Fix Makefile for OSX	2016-06-12 17:17:33 -04:00
snd_adpcm.c	Correct spelling mistakes.	2017-11-22 01:40:20 -06:00
snd_altivec.c	Isolate the Altivec code so non-Altivec PPC targets can use the same binary.	2018-05-12 14:14:47 -04:00
snd_codec.c	Add Ogg Opus support	2013-02-17 18:32:05 -06:00
snd_codec.h	Add Ogg Opus support	2013-02-17 18:32:05 -06:00
snd_codec_ogg.c	Support FS_SEEK_END and negative offset for zipped files in FS_Seek	2013-11-08 18:43:34 -06:00
snd_codec_opus.c	Support FS_SEEK_END and negative offset for zipped files in FS_Seek	2013-11-08 18:43:34 -06:00
snd_codec_wav.c	Bug 5094 - Code cleanup, patch by Zack Middleton and DevHC. Fixes unused-but-set gcc warnings	2011-07-29 12:27:00 +00:00
snd_dma.c	Make s_info command display channels instead of stereo	2018-10-01 22:31:36 -05:00
snd_local.h	Fix SDL audio playback with 16-bit stereo sound	2018-10-01 22:28:51 -05:00
snd_main.c	Make s_useOpenAL be CVAR_LATCH	2018-05-01 16:18:44 -05:00
snd_mem.c	Fix undefined behaviour due to shifting signed in snd_mem.c	2018-04-08 21:41:26 -05:00
snd_mix.c	Fix memory corruption in S_TransferPaintBuffer	2021-12-08 18:46:58 +00:00
snd_openal.c	Avoid srcList[-1] in snd_openal.c	2018-04-08 21:41:31 -05:00
snd_public.h	REFACTOR [reletive -> relative]	2012-06-18 16:32:03 +00:00
snd_wavelet.c	snd_wavelet: avoid undefined pointer below array bounds	2016-09-25 17:13:40 +01:00