Thilo Schulz 813a6ecdc3 - Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory. ...

Reported by Luigi Auriemma.
- Moved directory traversal check to a more proper location.
- Added a few sanity checks for checksum/pakname storage to fix a crash that can occur under certain circumstances.

2006-06-16 20:38:08 +00:00

..

AL

* Updated AL headers

2005-12-01 20:53:28 +00:00

botlib

- "baseq3" literal replacement patch (by Erik Auerswald) applied

2006-04-26 13:36:58 +00:00

cgame

Added return; statement so it doesn't complain when it receives a remapShader command.

2006-05-06 12:11:24 +00:00

client

- Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory.

2006-06-16 20:38:08 +00:00

game

- "baseq3" literal replacement patch (by Erik Auerswald) applied

2006-04-26 13:36:58 +00:00

jpeg-6

* Moved various source files from their mod sdk locations to places more

2005-10-26 19:45:21 +00:00

libs/macosx

Mac OS X work...lots of little changes that touch a lot of random places.

2005-11-26 07:46:21 +00:00

null

* Added STATUS

2005-10-29 01:53:09 +00:00

q3_ui

Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:

2006-05-06 01:56:24 +00:00

qcommon

- Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory.

2006-06-16 20:38:08 +00:00

renderer

* Fix the MinGW build. Ugh.

2006-05-06 16:01:41 +00:00

SDL12/include

SDL and OpenAL headers.

2005-11-26 07:59:00 +00:00

server

Fixed missing initialization of idPack and missionPack variables which may result in failure to autodownload files from the server even if legitimate.

2006-05-15 19:50:44 +00:00

tools

SunOS -> sunos (patch by Vincent Cojot)

2006-04-23 20:59:06 +00:00

ui

Fix remapShader command in cgame and tweak it in ui.

2006-05-06 10:54:55 +00:00

unix

add update_url. Maybe we need it in the future

2006-05-06 08:46:21 +00:00

win32

Applied parts of Josh Weisskopf's patch to make naming of executables consistent with Linux.

2006-05-16 07:11:39 +00:00