From 6b811ada7ab0d419ad678a17150eb8eb90519494 Mon Sep 17 00:00:00 2001 From: Thilo Schulz Date: Mon, 3 Dec 2012 17:58:55 +0000 Subject: [PATCH] Add length check here as well, thanks Ensiform --- code/server/sv_main.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/code/server/sv_main.c b/code/server/sv_main.c index 80ad316c..8d5f1a2a 100644 --- a/code/server/sv_main.c +++ b/code/server/sv_main.c @@ -570,6 +570,10 @@ static void SVC_Status( netadr_t from ) { return; } + // A maximum challenge length of 128 should be more than plenty. + if(strlen(Cmd_Argv(1)) > 128) + return; + strcpy( infostring, Cvar_InfoString( CVAR_SERVERINFO ) ); // echo back the parameter to status. so master servers can use it as a challenge