Thilo Schulz 813a6ecdc3 - Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory. ...

Reported by Luigi Auriemma.
- Moved directory traversal check to a more proper location.
- Added a few sanity checks for checksum/pakname storage to fix a crash that can occur under certain circumstances.

2006-06-16 20:38:08 +00:00

..

cm_load.c

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_local.h

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_patch.c

* Fix to a memory leak in CM_ValidateFacet

2006-01-27 18:14:01 +00:00

cm_patch.h

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_polylib.c

* Fix to a memory leak in CM_ValidateFacet

2006-01-27 18:14:01 +00:00

cm_polylib.h

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_public.h

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_test.c

* Added STATUS

2005-10-29 01:53:09 +00:00

cm_trace.c

* Added STATUS

2005-10-29 01:53:09 +00:00

cmd.c

* Overhaul of console autocompletion

2006-01-22 01:58:50 +00:00

common.c

Replaced various "baseq3" strings with the centrally defined BASEGAME macro.

2006-04-26 11:27:12 +00:00

cvar.c

* Persistent console history

2006-01-24 04:35:19 +00:00

files.c

- Fix bug that allows a malicious server to write and overwrite any files in the quake3 directory.

2006-06-16 20:38:08 +00:00

huffman.c

* Added STATUS

2005-10-29 01:53:09 +00:00

md4.c

Fixed a crash in md4 routines when using them on files with zero length, reported by Lukasz Saduniowski.

2006-06-01 00:58:19 +00:00

md5.c

- Introduced various new typedefs for windows platform (int32_t, int64_t, etc...)

2006-04-27 13:39:41 +00:00

msg.c

Fix client "freezes" if a user with ASCII characters > 127 enters a server. Reported by tjw

2006-06-11 14:56:58 +00:00

net_chan.c

* Added STATUS

2005-10-29 01:53:09 +00:00

q_math.c

* Added Q_isnan for NaN tests with -ffast-math

2006-01-19 20:28:12 +00:00

q_platform.h

* NetBSD support patch from optical (alex@rigbo.se)

2005-12-27 19:46:01 +00:00

q_shared.c

Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:

2006-05-06 01:56:24 +00:00

q_shared.h

Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:

2006-05-06 01:56:24 +00:00

qcommon.h

- "baseq3" literal replacement patch (by Erik Auerswald) applied

2006-04-26 13:36:58 +00:00

qfiles.h

* Added STATUS

2005-10-29 01:53:09 +00:00

surfaceflags.h

* Added STATUS

2005-10-29 01:53:09 +00:00

unzip.c

* Quiet some warnings on OS X

2005-11-13 23:05:00 +00:00

unzip.h

* Added STATUS

2005-10-29 01:53:09 +00:00

vm_interpreted.c

- change long to intptr_t for 64bit windows compatability

2006-02-18 19:07:23 +00:00

vm_local.h

- change long to intptr_t for 64bit windows compatability

2006-02-18 19:07:23 +00:00

vm_none.c

revert int->long change as it breaks on 64bit. Actually only

2005-09-26 22:23:46 +00:00

vm_ppc_new.c

Correction in PowerPC JIT code. Fixes crash in server browser, etc, on Mac OS X

2006-05-29 03:02:54 +00:00

vm_ppc.c

* Added STATUS

2005-10-29 01:53:09 +00:00

vm_x86_64.c

use mmap to allocate memory for generated code to be able to set PROT_EXEC

2006-03-04 11:14:44 +00:00

vm_x86.c

Fix JIT compiler code execution on NX-protected win32 OS

2006-05-15 15:57:02 +00:00

vm.c

Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:

2006-05-06 01:56:24 +00:00