Thilo Schulz
813a6ecdc3
- Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory.
...
Reported by Luigi Auriemma.
- Moved directory traversal check to a more proper location.
- Added a few sanity checks for checksum/pakname storage to fix a crash that can occur under certain circumstances.
2006-06-16 20:38:08 +00:00
Thilo Schulz
c9c15562ea
Fix client "freezes" if a user with ASCII characters > 127 enters a server. Reported by tjw
2006-06-11 14:56:58 +00:00
Thilo Schulz
d9fe81c08e
Add HAVE_VM_COMPILED=true for x86 FreeBSD so vm_x86.c gets built.
2006-06-06 22:49:42 +00:00
Ludwig Nussel
eaa8f1c989
refactor platform specific stuff a bit
2006-06-06 18:09:09 +00:00
Thilo Schulz
99abd01c2f
Fix remotely exploitable parse download overflow reported by Luigi Auriemma.
...
See http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046578.html
for the advisory.
2006-06-04 13:45:53 +00:00
Thilo Schulz
84296bfc2c
Fixed a crash in md4 routines when using them on files with zero length, reported by Lukasz Saduniowski.
2006-06-01 00:58:19 +00:00
Thilo Schulz
9af85d9378
Forgot to check for windows-style path seperator in precaution against directory traversal abuse.
2006-06-01 00:23:46 +00:00
Thilo Schulz
503c0a22c6
Partially applied patch from Joerg Dietrich. Fixes:
...
- incorrect handling of file names when opening sound files by name without extension
- byte endian issues in ogg decoder.
2006-06-01 00:14:56 +00:00
Ryan C. Gordon
997dffc649
Correction in PowerPC JIT code. Fixes crash in server browser, etc, on Mac OS X
...
and probably PowerPC Linux, too...fixes Bugzilla #2519 .
2006-05-29 03:02:54 +00:00
Thilo Schulz
856a397e8c
Prevent servers from making clients download files that are written to non-quake3 directories.
2006-05-28 14:36:37 +00:00
Zachary Slater
af7fa1784d
sdl1111111111111111111111111111
2006-05-25 16:22:19 +00:00
Zachary Slater
febd62a4bc
Since we've hit the second time for this being asked...
2006-05-22 04:48:09 +00:00
Thilo Schulz
d2b5dd1e8a
Applied parts of Josh Weisskopf's patch to make naming of executables consistent with Linux.
2006-05-16 07:11:39 +00:00
Thilo Schulz
e5c0581d52
Added two missing source files to the MSVC project files
2006-05-16 07:03:36 +00:00
Thilo Schulz
6fe78df757
Fixed missing initialization of idPack and missionPack variables which may result in failure to autodownload files from the server even if legitimate.
2006-05-15 19:50:44 +00:00
Thilo Schulz
a08a539c10
Fix JIT compiler code execution on NX-protected win32 OS
2006-05-15 15:57:02 +00:00
Thilo Schulz
27df5fca31
Corrected #include directives of openal headers for MSVC.
2006-05-13 12:18:43 +00:00
Thilo Schulz
60293f49ee
Fix bug that permits download of arbitrary files from a download enabled server by checking requested file name against the list of loaded pk3 files. See CVE-2006-2082
2006-05-08 19:53:41 +00:00
Tim Angus
fda7db7619
* Fix the MinGW build. Ugh.
2006-05-06 16:01:41 +00:00
Thilo Schulz
e1c5be3ab0
Added return; statement so it doesn't complain when it receives a remapShader command.
2006-05-06 12:11:24 +00:00
Thilo Schulz
5ebb75e651
Fix remapShader command in cgame and tweak it in ui.
2006-05-06 10:54:55 +00:00
Ludwig Nussel
63d2010914
add update_url. Maybe we need it in the future
2006-05-06 08:46:21 +00:00
Thilo Schulz
d21411452e
Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:
...
http://milw0rm.com/exploits/1750
2006-05-06 01:56:24 +00:00
Zachary Slater
2e368c02a6
Hm, thought I added this earlier.
2006-05-04 23:58:08 +00:00
Thilo Schulz
2675960c2c
removed a space too much after "say_team: " chat prompt.
2006-05-04 15:37:08 +00:00
Thilo Schulz
1847c321f0
- Added SV_Shutdown to Linux signal handler to ensure that clients don't hang when server gets killed, as suggested by Tony J. White
...
- Added newline to final message sent to clients.
- Added check for whether client is running at all before CL_Shutdown runs through.
2006-05-04 13:59:58 +00:00
Thilo Schulz
2583351211
- Replaced SV_GetPlayerByName with SV_GetPlayerByHandle that supports lookup of client_t structures by playernum, too.
...
That means the ban and kick commands will now accept the playernum - as seen in the status command - as argument.
2006-05-02 21:20:07 +00:00
Thilo Schulz
7b6fe90aad
Fix "Net_CompareAdr: Bad address type" error message when starting a new map with bots.
2006-05-02 17:53:26 +00:00
Ludwig Nussel
8895df0925
- remove leftover anistropic filtering variables from glconfig_t
...
- check size of glconfig_t to prevent accidential ABI breakage in the future
2006-04-30 15:00:39 +00:00
Thilo Schulz
12a2b7694a
- Fixed incompatibility to original VMs introduced by anisotropic filtering patch.
...
- Removed dependency of flares from tr.identityLight because they are barely visible with r_overbrightbits set to 1
2006-04-30 14:32:56 +00:00
Thilo Schulz
82c4c70535
- Fix r_overBrightBits variable getting ignored on Linux
...
- Replaced SDL_SetGamma by SDL_SetGammaRamp with gamma behaviour now matching win_gamma.c
2006-04-30 13:50:13 +00:00
Thilo Schulz
75eb99b716
SDL built won't get copied anymore because it gets built by default even if SMP doesn't work.
2006-04-29 19:54:54 +00:00
Thilo Schulz
e8a5e4c1ad
Applied patch by Ben Noordhuis:
...
- Fix for "make copyfile" errors when certain parts are not built.
- SMP binary and QVMs now get copied when built
2006-04-29 19:11:37 +00:00
Tim Angus
d475dfef97
* Yet another tweak to the long server uptime bug fix
2006-04-28 17:31:02 +00:00
Thilo Schulz
f1afb6ae1a
Added readme detailing about the MD4/MDR format ioquake3 supports.
2006-04-27 15:49:17 +00:00
Thilo Schulz
55453fd919
Fix for skybox blacklines bug on non-SDL compilations.
2006-04-27 14:48:35 +00:00
Thilo Schulz
235e2c215f
- Introduced various new typedefs for windows platform (int32_t, int64_t, etc...)
...
- Applied md5 64-bit safety patch by Tony White.
2006-04-27 13:39:41 +00:00
Thilo Schulz
c116695ea7
- "baseq3" literal replacement patch (by Erik Auerswald) applied
...
- Commented setting of the cl_guid cvar because md5.c is not 64-bit safe.
2006-04-26 13:36:58 +00:00
Thilo Schulz
dbdc92d4be
strupr'ing demo filenames breaks demo selection on case sensitive file systems.
2006-04-26 11:31:18 +00:00
Thilo Schulz
70fca10af2
Replaced various "baseq3" strings with the centrally defined BASEGAME macro.
2006-04-26 11:27:12 +00:00
Ludwig Nussel
88b2b82b00
SunOS -> sunos (patch by Vincent Cojot)
2006-04-23 20:59:06 +00:00
Thilo Schulz
31fdab187c
Fix didn't work yet because it didn't use the buffer where the filename extension chop-off is done. D'oh!
2006-04-23 20:04:42 +00:00
Tim Angus
56294e2da8
* Oops
2006-04-23 18:04:51 +00:00
Tim Angus
8aecee5158
* cl_guid for semi-reliable server authentication (from tjw)
2006-04-22 22:21:56 +00:00
Tim Angus
68b9eb3fba
* Anisotropic texture filtering (from Echon)
2006-04-22 22:14:15 +00:00
Thilo Schulz
40d5eee8ef
Fix prohibits illegal downloading of id PK3 files from servers. That bug is hit by *every* official server release from ID.
2006-04-22 18:24:50 +00:00
Tim Angus
ef51968654
* Fix to a bug introduced by the fix to the long server uptime bug
2006-04-22 15:57:43 +00:00
Zachary Slater
91cfe4a77c
Ignore the build dir.
2006-04-21 20:51:15 +00:00
Thilo Schulz
e7daf33d8e
- botlib logfile now gets stored in the fs_game directory in fs_homepath. (patch from Erik Auerswald)
...
- Added proper error handling when fopening qconsole.log
- Fixed bug where r_chat.c gets loaded in botlib even when bot_nochat is 1.
2006-04-21 17:04:21 +00:00
Thilo Schulz
57cc0f901e
Still some little improvements to flares.
2006-04-20 16:52:39 +00:00
