jedi-academy/codemp/renderer
Jonathan Gray 832b4342a8 CVE-2006-2236 Buffer overflow in the Quake 3 Engine
CVE-2006-2236
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60,
(2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b
allows remote attackers to execute arbitrary commands via a long
remapShader command.

from Thilo Schulz in ioquake3
svn 765 git d21411452ef32b86c0b79ddcaf49221701dcdb07

Add string length checking to function COM_StripExtension. This fixes
the R_RemapShader buffer overflow exploit that can be found here:
http://milw0rm.com/exploits/1750
2013-05-07 22:18:45 +10:00
..
glext.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
glext_console.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
matcomp.c ditch dos style newlines 2013-04-23 15:21:39 +10:00
matcomp.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
mdx_format.h rename _X to avoid a collision with ctype.h 2013-04-25 23:51:53 +10:00
qgl.h add sdl glimp/input from ioquake3 for MP 2013-04-30 15:02:26 +10:00
qgl_console.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
qgl_linked.h add sdl glimp/input from ioquake3 for MP 2013-04-30 15:02:26 +10:00
tr_animation.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_arioche.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_backend.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_bsp.cpp CVE-2006-2236 Buffer overflow in the Quake 3 Engine 2013-05-07 22:18:45 +10:00
tr_bsp_xbox.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_cmds.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_curve.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_curve_xbox.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_flares.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_font.cpp CVE-2006-2236 Buffer overflow in the Quake 3 Engine 2013-05-07 22:18:45 +10:00
tr_font.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_ghoul2.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_image.cpp CVE-2006-2236 Buffer overflow in the Quake 3 Engine 2013-05-07 22:18:45 +10:00
tr_image_xbox.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_init.cpp add sdl glimp/input from ioquake3 for MP 2013-04-30 15:02:26 +10:00
tr_landscape.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_light.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_local.h make some ifdefs more specific to let this compile on more platforms 2013-04-26 22:27:23 +10:00
tr_main.cpp make some ifdefs more specific to let this compile on more platforms 2013-04-26 22:27:23 +10:00
tr_marks.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_mesh.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_model.cpp change iterator erasing so we don't need to overload the = operator 2013-04-26 22:27:19 +10:00
tr_noise.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_public.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_quicksprite.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_quicksprite.h ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_scene.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_shade.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_shade_calc.cpp fix some accesses beyond the end of arrays spotted via clang 2013-04-26 22:27:24 +10:00
tr_shader.cpp CVE-2006-2236 Buffer overflow in the Quake 3 Engine 2013-05-07 22:18:45 +10:00
tr_shadows.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_sky.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_surface.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_surfacesprites.cpp fix #includes to compile on non windows without pch 2013-04-25 23:51:46 +10:00
tr_terrain.cpp use QDECL instead of __cdecl 2013-04-26 22:27:20 +10:00
tr_world.cpp ditch dos style newlines 2013-04-23 15:21:39 +10:00
tr_WorldEffects.cpp strcmpi -> Q_strcmpi 2013-04-26 22:27:20 +10:00
tr_WorldEffects.h ditch dos style newlines 2013-04-23 15:21:39 +10:00