zdoom/raze-gles
0
0
Fork 0
mirror of https://github.com/ZDoom/raze-gles.git synced 2024-12-25 11:10:47 +00:00
Code Issues Projects Releases Packages Wiki Activity

Fix OOB access in clipmove

Browse source 
git-svn-id: https://svn.eduke32.com/eduke32@7685 1a8010ca-5511-0410-912e-c29ae57300e0
This commit is contained in:
hendricks266 2019-05-27 05:45:41 +00:00 committed by Christoph Oelckers
parent 849b095b26
commit 3598e79dc7
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
source/build/src/clip.cpp
View file

@ -1348,8 +1348,9 @@ int32_t clipmove(vec3_t * const pos, int16_t * const sectnum, int32_t xvect, int
int32_t const tempint1 = dmulscale6(clipr.x, move.x, clipr.y, move.y); int32_t const tempint1 = dmulscale6(clipr.x, move.x, clipr.y, move.y);
for (int i=cnt+1, j=hitwalls[i]; i<=clipmoveboxtracenum; j=hitwalls[++i]) for (int i=cnt+1, j; i<=clipmoveboxtracenum; ++i)
{ {
j = hitwalls[i];
int32_t const tempint2 = dmulscale6(clipit[j].x2 - clipit[j].x1, move.x, clipit[j].y2 - clipit[j].y1, move.y); int32_t const tempint2 = dmulscale6(clipit[j].x2 - clipit[j].x1, move.x, clipit[j].y2 - clipit[j].y1, move.y);
if ((tempint1^tempint2) < 0) if ((tempint1^tempint2) < 0)