ubergames
/
lilium-voyager
mirror of https://github.com/UberGames/lilium-voyager.git
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Bugzilla #4753 

Potential buffer overflow in UpdateTournamentInfo()
This commit is contained in:
Zachary Slater 2010-10-25 06:39:11 +00:00
parent 956f495726
commit a4327ef965
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
code/game/g_arenas.c
View File

@ -42,7 +42,6 @@ void UpdateTournamentInfo( void ) {
gentity_t *player;
int playerClientNum;
int n, accuracy, perfect, msglen;
int buflen;
#ifdef MISSIONPACK
int score1, score2;
qboolean won;
@ -126,8 +125,8 @@ void UpdateTournamentInfo( void ) {
for( i = 0; i < level.numNonSpectatorClients; i++ ) {
n = level.sortedClients[i];
Com_sprintf( buf, sizeof(buf), " %i %i %i", n, level.clients[n].ps.persistant[PERS_RANK], level.clients[n].ps.persistant[PERS_SCORE] );
buflen = strlen( buf );
if( msglen + buflen + 1 >= sizeof(msg) ) {
msglen += strlen( buf );
if( msglen >= sizeof(msg) ) {
break;
}
strcat( msg, buf );