qf/newtree
0
0
Fork 0
mirror of https://git.code.sf.net/p/quake/newtree synced 2025-02-23 20:00:55 +00:00
Code Issues Projects Releases Packages Wiki Activity

fix the segfault caused by corrupt meshes

Browse source
This commit is contained in:
Bill Currie 2001-01-15 07:27:27 +00:00
parent a19b49d83c
commit 1a0d81fd2e
1 changed files with 20 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

38
source/gl_mesh.c
View file

@ -340,26 +340,28 @@ GL_MakeAliasModelDisplayLists (model_t *m, aliashdr_t *hdr, void *_m, int _s)
memset (d2, 0, sizeof (d2)); memset (d2, 0, sizeof (d2));
Qread (f, &nc, 4); Qread (f, &nc, 4);
Qread (f, &no, 4); Qread (f, &no, 4);
Qread (f, &c, nc * sizeof (c[0])); if (nc <= 8192 && no <= 8192) {
Qread (f, &vo, no * sizeof (vo[0])); Qread (f, &c, nc * sizeof (c[0]));
Qread (f, d1, MDFOUR_DIGEST_BYTES); Qread (f, &vo, no * sizeof (vo[0]));
Qread (f, d2, MDFOUR_DIGEST_BYTES); Qread (f, d1, MDFOUR_DIGEST_BYTES);
Qclose (f); Qread (f, d2, MDFOUR_DIGEST_BYTES);
Qclose (f);
mdfour_begin (&md); mdfour_begin (&md);
mdfour_update (&md, (unsigned char*)&nc, 4); mdfour_update (&md, (unsigned char*)&nc, 4);
mdfour_update (&md, (unsigned char*)&no, 4); mdfour_update (&md, (unsigned char*)&no, 4);
mdfour_update (&md, (unsigned char*)&c, nc * sizeof (c[0])); mdfour_update (&md, (unsigned char*)&c, nc * sizeof (c[0]));
mdfour_update (&md, (unsigned char*)&vo, no * sizeof (vo[0])); mdfour_update (&md, (unsigned char*)&vo, no * sizeof (vo[0]));
mdfour_update (&md, d1, MDFOUR_DIGEST_BYTES); mdfour_update (&md, d1, MDFOUR_DIGEST_BYTES);
mdfour_result (&md, mesh_digest); mdfour_result (&md, mesh_digest);
if (memcmp (d2, mesh_digest, MDFOUR_DIGEST_BYTES) == 0 && memcmp (d1, model_digest, MDFOUR_DIGEST_BYTES) == 0) { if (memcmp (d2, mesh_digest, MDFOUR_DIGEST_BYTES) == 0 && memcmp (d1, model_digest, MDFOUR_DIGEST_BYTES) == 0) {
remesh = false; remesh = false;
numcommands = nc; numcommands = nc;
numorder = no; numorder = no;
memcpy (commands, c, numcommands * sizeof (c[0])); memcpy (commands, c, numcommands * sizeof (c[0]));
memcpy (vertexorder, vo, numorder * sizeof (vo[0])); memcpy (vertexorder, vo, numorder * sizeof (vo[0]));
}
} }
} }
if (remesh) { if (remesh) {