Commit graph

66 commits

Author SHA1 Message Date
Jonathan Gray
1a40cbbe89 Fix to COM_ParseExt 1 byte overwrite bug
from Tim Angus in ioquake3
svn 95 git 33a48a0336865a9d21983e4836920cd9f3401101

Fix to COM_ParseExt 1 byte overwrite bug

from http://www.quakesrc.org/forums/viewtopic.php?t=5374
2013-05-07 22:18:44 +10:00
Jonathan Gray
fefad8e48c Fix to multiple buffer overflow bugs in CL_Rcon_f
from Tim Angus in ioquake3
svn 95 git 33a48a0336865a9d21983e4836920cd9f3401101

Fix to multiple buffer overflow bugs in CL_Rcon_f

from http://www.quakesrc.org/forums/viewtopic.php?t=5374
2013-05-07 22:18:44 +10:00
Jonathan Gray
8fc8601e0b CVE-2005-0430 Fixed q3infoboom
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote
attackers to cause a denial of service (shutdown game server) and
possibly crash the server via a long infostring, possibly triggering a
buffer overflow.

Luigi Auriemma q3infoboom

from Tim Angus in ioquake3
svn 95 git 33a48a0336865a9d21983e4836920cd9f3401101

It looks as if the q3infoboom bug has already been fixed in ioQ3 in a
different way, though this patch addresses the cause. The existing fix
should stay since it's a sensible sanity check anyway.

from http://www.quakesrc.org/forums/viewtopic.php?t=5374
2013-05-07 22:18:29 +10:00
Jonathan Gray
a6591f68df CVE-2005-0430 Remotely exploitable Infostring Crash
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote
attackers to cause a denial of service (shutdown game server) and
possibly crash the server via a long infostring, possibly triggering a
buffer overflow.

Luigi Auriemma q3infoboom
bugzilla #2356

from Thilo Schulz in ioquake3
svn 58 git 01da6d757bb3121c9ee077e7269eee7655abd05b

https://bugzilla.icculus.org/show_bug.cgi?id=2356
Remotely exploitable Infostring Crash
2013-05-07 22:17:57 +10:00
Jonathan Gray
a3d6db9f5d set some possibly uninitialised vars to zero 2013-05-02 13:47:51 +10:00
Jonathan Gray
2a6c6cf358 disable some noisy and mostly harmless warnings 2013-05-02 13:47:51 +10:00
Jonathan Gray
624419334f const fixes 2013-05-02 13:47:51 +10:00
Jonathan Gray
804687385c avoid enum to int conversions 2013-05-02 13:47:50 +10:00
Jonathan Gray
6ae7218c21 remove the use of 'typedef enum' without an indentifier 2013-05-02 13:47:50 +10:00
Jonathan Gray
7d29fb84a5 remove surplus tokens after preprocessor directives 2013-05-02 13:47:50 +10:00
Jonathan Gray
96fa13bbdb add sdl glimp/input from ioquake3 for MP 2013-04-30 15:02:26 +10:00
Alexandre Blin
77295da1d9 Fixed error in .menu file parsing on Unix 2013-04-27 02:27:50 +10:00
Jonathan Gray
14b5c93ba1 avoid overflowing buffer with GL_EXTENSIONS, from ioquake3 2013-04-26 22:27:25 +10:00
Jonathan Gray
defd14bd3c shuffle some prototypes around to appease gcc 2013-04-26 22:27:24 +10:00
Jonathan Gray
15cc54b440 adjust to different scoping of variables declared in for loops 2013-04-26 22:27:24 +10:00
Jonathan Gray
a765a9a98e avoid extra qualification of function members 2013-04-26 22:27:24 +10:00
Jonathan Gray
ce76dab7de directly use time_t in botlib 2013-04-26 22:27:24 +10:00
Jonathan Gray
1660a3ca25 fix some accesses beyond the end of arrays spotted via clang 2013-04-26 22:27:24 +10:00
Jonathan Gray
0ad40e0b6d make some ifdefs more specific to let this compile on more platforms 2013-04-26 22:27:23 +10:00
Jonathan Gray
fb2f55824f avoid redefining typedefs which is allowed in c++ but not c99 2013-04-26 22:27:23 +10:00
Jonathan Gray
09ee3c1696 use libGL.so.1 on linux 2013-04-26 22:27:23 +10:00
Jonathan Gray
b393554c11 use memmove not strcpy when src and test overlap, from ioquake3 2013-04-26 22:27:23 +10:00
Jonathan Gray
59010a333c make inlines static inline 2013-04-26 22:27:22 +10:00
Jonathan Gray
dc634d39db add a cmake file 2013-04-26 22:27:22 +10:00
Jonathan Gray
b1f71d5b81 don't try to compile c files as c++ 2013-04-26 22:27:22 +10:00
Jonathan Gray
ecd674b852 locally define min()/max() so there won't be unresolved symbols 2013-04-26 22:27:22 +10:00
Jonathan Gray
80b273bbaa strupr -> Q_strupr 2013-04-26 22:27:21 +10:00
Jonathan Gray
36099f2c19 allow null_snddma to be used with snd_dma 2013-04-26 22:27:21 +10:00
Jonathan Gray
e454e9ebd7 callMask needs to be externally visible 2013-04-26 22:27:21 +10:00
Jonathan Gray
4d32952cd6 adapt the q3a unix backend to c++ and JA 2013-04-26 22:27:21 +10:00
Jonathan Gray
0bbe192b6f rename some c files that will be compiled as c++ 2013-04-26 22:27:21 +10:00
Jonathan Gray
30190c7cdc provide a gcc style alternative to the inline asm in zlib 2013-04-26 22:27:20 +10:00
Jonathan Gray
b65a1f3bde use QDECL instead of __cdecl 2013-04-26 22:27:20 +10:00
Jonathan Gray
eb0c330619 strcmpi -> Q_strcmpi 2013-04-26 22:27:20 +10:00
Jonathan Gray
5d7ccfdff5 force some inherited template names to be dependent 2013-04-26 22:27:20 +10:00
Jonathan Gray
e058e43fa4 place win32 code under #ifdef _WIN32 not #ifndef __linux__ 2013-04-26 22:27:19 +10:00
Jonathan Gray
d08003294d rename some files to restore the correct case 2013-04-26 22:27:19 +10:00
Jonathan Gray
a064ebf87a change iterator erasing so we don't need to overload the = operator 2013-04-26 22:27:19 +10:00
Jonathan Gray
d7b7f5ac78 match the rest of the code and have OutputDebugString under _DEBUG 2013-04-26 22:27:12 +10:00
Jonathan Gray
d8c10b2711 avoid scoped enums which was until very recently a microsoft extension 2013-04-25 23:51:57 +10:00
Jonathan Gray
e8391f9c09 powf -> Q_powf 2013-04-25 23:51:57 +10:00
Jonathan Gray
f99cdcd1fa leave the masm assembly to msvc 2013-04-25 23:51:56 +10:00
Jonathan Gray
f820286f06 opt out of more masm assembly 2013-04-25 23:51:56 +10:00
Jonathan Gray
5c941d29f1 strnicmp -> Q_strnicmp 2013-04-25 23:51:56 +10:00
Jonathan Gray
901d5acb51 stricmp -> Q_stricmp 2013-04-25 23:51:55 +10:00
Jonathan Gray
e5e1251df8 make the openal code compile without eax and enable it by default 2013-04-25 23:51:55 +10:00
Jonathan Gray
017bd42a1b add a gcc style alignment alternative to msvc code 2013-04-25 23:51:55 +10:00
Jonathan Gray
37d2ad3bf1 put some wgl parts under _WIN32 2013-04-25 23:51:55 +10:00
Jonathan Gray
4d606a650d USHORT -> unsigned short 2013-04-25 23:51:54 +10:00
Jonathan Gray
067e58ea4e provide a gcc style alternative to the inline asm in timing.h 2013-04-25 23:51:54 +10:00