Commit graph

140 commits

Author SHA1 Message Date
Jonathan Gray
8fc8601e0b CVE-2005-0430 Fixed q3infoboom
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote
attackers to cause a denial of service (shutdown game server) and
possibly crash the server via a long infostring, possibly triggering a
buffer overflow.

Luigi Auriemma q3infoboom

from Tim Angus in ioquake3
svn 95 git 33a48a0336865a9d21983e4836920cd9f3401101

It looks as if the q3infoboom bug has already been fixed in ioQ3 in a
different way, though this patch addresses the cause. The existing fix
should stay since it's a sensible sanity check anyway.

from http://www.quakesrc.org/forums/viewtopic.php?t=5374
2013-05-07 22:18:29 +10:00
Jonathan Gray
a6591f68df CVE-2005-0430 Remotely exploitable Infostring Crash
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote
attackers to cause a denial of service (shutdown game server) and
possibly crash the server via a long infostring, possibly triggering a
buffer overflow.

Luigi Auriemma q3infoboom
bugzilla #2356

from Thilo Schulz in ioquake3
svn 58 git 01da6d757bb3121c9ee077e7269eee7655abd05b

https://bugzilla.icculus.org/show_bug.cgi?id=2356
Remotely exploitable Infostring Crash
2013-05-07 22:17:57 +10:00
Zachary J. Slater
6902b84f94 Merge pull request #7 from jonathangray/warn
Clean up some warnings and remove the need for -fpermissive
2013-05-02 12:04:09 -07:00
Jonathan Gray
dfb45c84f6 make g_savegame.cpp build on amd64 without -fpermissive 2013-05-02 19:08:16 +10:00
Jonathan Gray
a3d6db9f5d set some possibly uninitialised vars to zero 2013-05-02 13:47:51 +10:00
Jonathan Gray
2a6c6cf358 disable some noisy and mostly harmless warnings 2013-05-02 13:47:51 +10:00
Jonathan Gray
624419334f const fixes 2013-05-02 13:47:51 +10:00
Jonathan Gray
804687385c avoid enum to int conversions 2013-05-02 13:47:50 +10:00
Jonathan Gray
6ae7218c21 remove the use of 'typedef enum' without an indentifier 2013-05-02 13:47:50 +10:00
Jonathan Gray
7d29fb84a5 remove surplus tokens after preprocessor directives 2013-05-02 13:47:50 +10:00
Jonathan Gray
42dd32771a set some possibly uninitialised vars to zero 2013-05-02 13:47:34 +10:00
Jonathan Gray
1a47ca7601 disable some noisy and mostly harmless warnings 2013-05-02 01:32:46 +10:00
Jonathan Gray
4074a53216 remove an uneeded extern decl that conflicts with an earlier one 2013-05-02 00:45:22 +10:00
Jonathan Gray
e95505989f const fixes 2013-05-02 00:45:16 +10:00
Jonathan Gray
178544362e avoid enum to int conversions 2013-05-01 23:47:33 +10:00
Jonathan Gray
88e6b70d0d remove the use of 'typedef enum' without an indentifier 2013-05-01 23:47:33 +10:00
Jonathan Gray
00934e804e remove surplus tokens after preprocessor directives 2013-05-01 23:47:32 +10:00
Zachary J. Slater
908d2f0880 Merge pull request #6 from jonathangray/sdl
add SDL glimp/input from ioquake3
2013-04-29 22:25:17 -07:00
Jonathan Gray
dad17e40f1 windowed mouse is fixed with sdl 2013-04-30 15:05:13 +10:00
Jonathan Gray
96fa13bbdb add sdl glimp/input from ioquake3 for MP 2013-04-30 15:02:26 +10:00
Jonathan Gray
8f7968cb9c add sdl glimp/input from ioquake3 for SP 2013-04-30 15:02:18 +10:00
Zachary J. Slater
788897fb1f Merge pull request #4 from jonathangray/mp_port
adapt multiplayer code to gcc/unix
2013-04-27 12:02:10 -07:00
Zachary J. Slater
e1ff5e35b1 Merge pull request #5 from jonathangray/amd64_fix
amd64 fix for CBlockStream/icarus
2013-04-27 12:01:35 -07:00
Jonathan Gray
b1bf1b1379 update readme for icarus fix 2013-04-27 21:39:12 +10:00
Jonathan Gray
721432a911 fix CBlockStream/icarus on amd64 2013-04-27 21:39:06 +10:00
Alexandre Blin
77295da1d9 Fixed error in .menu file parsing on Unix 2013-04-27 02:27:50 +10:00
Jonathan Gray
2ee20c7123 update the readme for multiplayer 2013-04-26 22:27:25 +10:00
Jonathan Gray
14b5c93ba1 avoid overflowing buffer with GL_EXTENSIONS, from ioquake3 2013-04-26 22:27:25 +10:00
Jonathan Gray
defd14bd3c shuffle some prototypes around to appease gcc 2013-04-26 22:27:24 +10:00
Jonathan Gray
15cc54b440 adjust to different scoping of variables declared in for loops 2013-04-26 22:27:24 +10:00
Jonathan Gray
a765a9a98e avoid extra qualification of function members 2013-04-26 22:27:24 +10:00
Jonathan Gray
ce76dab7de directly use time_t in botlib 2013-04-26 22:27:24 +10:00
Jonathan Gray
1660a3ca25 fix some accesses beyond the end of arrays spotted via clang 2013-04-26 22:27:24 +10:00
Jonathan Gray
0ad40e0b6d make some ifdefs more specific to let this compile on more platforms 2013-04-26 22:27:23 +10:00
Jonathan Gray
fb2f55824f avoid redefining typedefs which is allowed in c++ but not c99 2013-04-26 22:27:23 +10:00
Jonathan Gray
09ee3c1696 use libGL.so.1 on linux 2013-04-26 22:27:23 +10:00
Jonathan Gray
b393554c11 use memmove not strcpy when src and test overlap, from ioquake3 2013-04-26 22:27:23 +10:00
Jonathan Gray
59010a333c make inlines static inline 2013-04-26 22:27:22 +10:00
Jonathan Gray
dc634d39db add a cmake file 2013-04-26 22:27:22 +10:00
Jonathan Gray
b1f71d5b81 don't try to compile c files as c++ 2013-04-26 22:27:22 +10:00
Jonathan Gray
ecd674b852 locally define min()/max() so there won't be unresolved symbols 2013-04-26 22:27:22 +10:00
Jonathan Gray
80b273bbaa strupr -> Q_strupr 2013-04-26 22:27:21 +10:00
Jonathan Gray
36099f2c19 allow null_snddma to be used with snd_dma 2013-04-26 22:27:21 +10:00
Jonathan Gray
e454e9ebd7 callMask needs to be externally visible 2013-04-26 22:27:21 +10:00
Jonathan Gray
4d32952cd6 adapt the q3a unix backend to c++ and JA 2013-04-26 22:27:21 +10:00
Jonathan Gray
0bbe192b6f rename some c files that will be compiled as c++ 2013-04-26 22:27:21 +10:00
Jonathan Gray
30190c7cdc provide a gcc style alternative to the inline asm in zlib 2013-04-26 22:27:20 +10:00
Jonathan Gray
b65a1f3bde use QDECL instead of __cdecl 2013-04-26 22:27:20 +10:00
Jonathan Gray
eb0c330619 strcmpi -> Q_strcmpi 2013-04-26 22:27:20 +10:00
Jonathan Gray
5d7ccfdff5 force some inherited template names to be dependent 2013-04-26 22:27:20 +10:00