Zack Middleton df8f657f09 Fix exploit to bypass filename restrictions on Windows ...

Windows API ignores all trailing spaces and periods which can get around
Quake 3 file system restrictions. QVM opening 'uix86.dll.' actually
opens 'uix86.dll' which allows QVM to write native code.

This is done in the low-level Sys_FOpen() instead of the function
directly used by VMs ( FS_FOpenFileByMode() ) in case there are engine
commands now or in the future that can read or write arbitrary files.

Reported by Noah Metzger (Chomenor).

2018-01-30 07:59:25 -06:00

..

AL

5882 - Update OpenAL Headers to OpenAL Soft 1.15.1

2013-02-17 07:34:41 -06:00

asm

Remove unused fpucw from snapvector.asm

2015-07-09 18:35:45 -05:00

autoupdater

Use "x86_64" and not "x86-64" like everything else in ioq3.

2017-06-04 02:46:49 -04:00

botlib

Make FS_BuildOSPath for botlib.log consistent with typical usage

2017-12-23 17:01:08 -06:00

cgame

Fix invalid model frame developer warnings in Team Arena

2017-11-22 20:21:02 -06:00

client

Revert my recent cvar latch changes

2018-01-21 22:45:46 -06:00

curl-7.54.0/include

Update internal curl to 7.54.0

2017-07-28 16:32:22 +01:00

game

fix a few potential buffer overwrite in Game VM

2017-12-16 12:51:34 -06:00

jpeg-8c

Mark JPEG lib changes, file provided by Simon McVittie

2012-07-01 18:07:56 +00:00

libogg-1.3.2

Rename (already updated) libogg-1.3.1 to libogg-1.3.2

2017-05-23 11:47:26 -05:00

libs

Update internal curl to 7.54.0

2017-07-28 16:32:22 +01:00

libvorbis-1.3.5

Rename (already updated) libvorbis-1.3.4 to libvorbis-1.3.5

2017-05-23 11:47:26 -05:00

null

[null/null_glimp.c] Fix up bitrot in null impl

2016-07-26 10:52:15 +01:00

opus-1.1.4

Rename (already updated) opus-1.1 to opus-1.1.4

2017-05-23 11:47:27 -05:00

opusfile-0.8

Fix more maybe-uninitialized warnings in opusfile

2017-07-09 14:01:41 -05:00

q3_ui

Correct spelling mistakes.

2017-11-22 01:40:20 -06:00

qcommon

Revert my recent cvar latch changes

2018-01-21 22:45:46 -06:00

renderercommon

Correct spelling mistakes.

2017-11-22 01:40:20 -06:00

renderergl1

Use standard offsetof facility. Dereferencing a null pointer results

2018-01-21 06:01:50 -06:00

renderergl2

OpenGL2: Restore adding fixed ambient light when HDR is enabled

2017-12-15 17:46:51 -06:00

sdl

Load OpenGL ES 1.1 function procs

2017-10-02 04:48:07 -05:00

SDL2/include

Update SDL2 to 2.0.4

2016-08-15 22:20:00 -04:00

server

Don't register fs_game cvar everywhere just to get the value

2018-01-21 06:02:08 -06:00

sys

Fix exploit to bypass filename restrictions on Windows

2018-01-30 07:59:25 -06:00

tools

Few LCC memory fixes.

2017-12-15 18:08:23 -06:00

ui

Correct spelling mistakes.

2017-11-22 01:40:20 -06:00

zlib

drop some useless return statements

2013-05-30 15:43:21 -05:00