aboutsummaryrefslogtreecommitdiffstats
path: root/code
Commit message (Collapse)AuthorAgeFilesLines
* Fix critical buffer overflow in cgame, see exploit at ↵thilo2006-07-061-2/+2
| | | | | | http://www.milw0rm.com/exploits/1977 git-svn-id: svn://svn.icculus.org/quake3/trunk@813 edf5b092-35ff-0310-97b2-ce42778d08ea
* - print warning if server tries to set cvars it shouldn't setludwig2006-07-051-1/+4
| | | | | | | - make warnings yellow git-svn-id: svn://svn.icculus.org/quake3/trunk@812 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Fix arbitrary cvar overwrite flaw: http://aluigi.altervista.org/adv.htmthilo2006-07-035-3/+60
| | | | | | | - Add myself to maintainer list :) git-svn-id: svn://svn.icculus.org/quake3/trunk@811 edf5b092-35ff-0310-97b2-ce42778d08ea
* * OpenAL bug fix (from Josh Weisskopf)tma2006-06-171-0/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@810 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Better SDL joystick support (from Erik Auerswald)tma2006-06-171-20/+121
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@809 edf5b092-35ff-0310-97b2-ce42778d08ea
* * sv_minRate (from R1CH)tma2006-06-178-2/+90
| | | | | | | * [cl|sv]_packetdelay (from tjw) git-svn-id: svn://svn.icculus.org/quake3/trunk@808 edf5b092-35ff-0310-97b2-ce42778d08ea
* Remove chars with ascii value > 127 in MSG_ReadBigString too to make it ↵thilo2006-06-161-0/+4
| | | | | | correspond to the behaviour of WriteBigString. git-svn-id: svn://svn.icculus.org/quake3/trunk@806 edf5b092-35ff-0310-97b2-ce42778d08ea
* Little fix for the sanity check fix from previous rev...thilo2006-06-161-3/+2
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@805 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Fix bug that allows a malicious server to write and overwrite any files in ↵thilo2006-06-162-18/+40
| | | | | | | | | | | the quake3 directory. Reported by Luigi Auriemma. - Moved directory traversal check to a more proper location. - Added a few sanity checks for checksum/pakname storage to fix a crash that can occur under certain circumstances. git-svn-id: svn://svn.icculus.org/quake3/trunk@804 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix client "freezes" if a user with ASCII characters > 127 enters a server. ↵thilo2006-06-111-0/+5
| | | | | | Reported by tjw git-svn-id: svn://svn.icculus.org/quake3/trunk@803 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix remotely exploitable parse download overflow reported by Luigi Auriemma.thilo2006-06-041-8/+20
| | | | | | | | See http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/046578.html for the advisory. git-svn-id: svn://svn.icculus.org/quake3/trunk@796 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fixed a crash in md4 routines when using them on files with zero length, ↵thilo2006-06-011-2/+2
| | | | | | reported by Lukasz Saduniowski. git-svn-id: svn://svn.icculus.org/quake3/trunk@795 edf5b092-35ff-0310-97b2-ce42778d08ea
* Forgot to check for windows-style path seperator in precaution against ↵thilo2006-06-011-1/+1
| | | | | | directory traversal abuse. git-svn-id: svn://svn.icculus.org/quake3/trunk@794 edf5b092-35ff-0310-97b2-ce42778d08ea
* Partially applied patch from Joerg Dietrich. Fixes:thilo2006-06-012-6/+18
| | | | | | | | - incorrect handling of file names when opening sound files by name without extension - byte endian issues in ogg decoder. git-svn-id: svn://svn.icculus.org/quake3/trunk@793 edf5b092-35ff-0310-97b2-ce42778d08ea
* Correction in PowerPC JIT code. Fixes crash in server browser, etc, on Mac OS Xicculus2006-05-291-4/+4
| | | | | | | and probably PowerPC Linux, too...fixes Bugzilla #2519. git-svn-id: svn://svn.icculus.org/quake3/trunk@791 edf5b092-35ff-0310-97b2-ce42778d08ea
* Prevent servers from making clients download files that are written to ↵thilo2006-05-281-0/+7
| | | | | | non-quake3 directories. git-svn-id: svn://svn.icculus.org/quake3/trunk@790 edf5b092-35ff-0310-97b2-ce42778d08ea
* Applied parts of Josh Weisskopf's patch to make naming of executables ↵thilo2006-05-161-7/+7
| | | | | | consistent with Linux. git-svn-id: svn://svn.icculus.org/quake3/trunk@783 edf5b092-35ff-0310-97b2-ce42778d08ea
* Added two missing source files to the MSVC project filesthilo2006-05-161-0/+59
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@782 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fixed missing initialization of idPack and missionPack variables which may ↵thilo2006-05-151-1/+1
| | | | | | result in failure to autodownload files from the server even if legitimate. git-svn-id: svn://svn.icculus.org/quake3/trunk@781 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix JIT compiler code execution on NX-protected win32 OSthilo2006-05-151-0/+18
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@780 edf5b092-35ff-0310-97b2-ce42778d08ea
* Corrected #include directives of openal headers for MSVC.thilo2006-05-131-2/+8
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@779 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix bug that permits download of arbitrary files from a download enabled ↵thilo2006-05-082-15/+46
| | | | | | server by checking requested file name against the list of loaded pk3 files. See CVE-2006-2082 git-svn-id: svn://svn.icculus.org/quake3/trunk@777 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Fix the MinGW build. Ugh.tma2006-05-061-1/+8
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@775 edf5b092-35ff-0310-97b2-ce42778d08ea
* Added return; statement so it doesn't complain when it receives a ↵thilo2006-05-061-0/+2
| | | | | | remapShader command. git-svn-id: svn://svn.icculus.org/quake3/trunk@774 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix remapShader command in cgame and tweak it in ui.thilo2006-05-062-4/+18
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@773 edf5b092-35ff-0310-97b2-ce42778d08ea
* add update_url. Maybe we need it in the futureludwig2006-05-061-0/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@772 edf5b092-35ff-0310-97b2-ce42778d08ea
* Add string length checking to function COM_StripExtension. This fixes the ↵thilo2006-05-0613-22/+22
| | | | | | | | | R_RemapShader buffer overflow exploit that can be found here: http://milw0rm.com/exploits/1750 git-svn-id: svn://svn.icculus.org/quake3/trunk@765 edf5b092-35ff-0310-97b2-ce42778d08ea
* removed a space too much after "say_team: " chat prompt.thilo2006-05-041-1/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@739 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Added SV_Shutdown to Linux signal handler to ensure that clients don't ↵thilo2006-05-043-1/+6
| | | | | | | | | | hang when server gets killed, as suggested by Tony J. White - Added newline to final message sent to clients. - Added check for whether client is running at all before CL_Shutdown runs through. git-svn-id: svn://svn.icculus.org/quake3/trunk@738 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Replaced SV_GetPlayerByName with SV_GetPlayerByHandle that supports lookup ↵thilo2006-05-021-6/+23
| | | | | | | | | of client_t structures by playernum, too. That means the ban and kick commands will now accept the playernum - as seen in the status command - as argument. git-svn-id: svn://svn.icculus.org/quake3/trunk@737 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix "Net_CompareAdr: Bad address type" error message when starting a new map ↵thilo2006-05-021-1/+1
| | | | | | with bots. git-svn-id: svn://svn.icculus.org/quake3/trunk@736 edf5b092-35ff-0310-97b2-ce42778d08ea
* - remove leftover anistropic filtering variables from glconfig_tludwig2006-04-302-3/+5
| | | | | | | - check size of glconfig_t to prevent accidential ABI breakage in the future git-svn-id: svn://svn.icculus.org/quake3/trunk@735 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Fixed incompatibility to original VMs introduced by anisotropic filtering ↵thilo2006-04-307-22/+31
| | | | | | | | | patch. - Removed dependency of flares from tr.identityLight because they are barely visible with r_overbrightbits set to 1 git-svn-id: svn://svn.icculus.org/quake3/trunk@734 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Fix r_overBrightBits variable getting ignored on Linuxthilo2006-04-301-7/+32
| | | | | | | - Replaced SDL_SetGamma by SDL_SetGammaRamp with gamma behaviour now matching win_gamma.c git-svn-id: svn://svn.icculus.org/quake3/trunk@733 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Yet another tweak to the long server uptime bug fixtma2006-04-281-1/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@730 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix for skybox blacklines bug on non-SDL compilations.thilo2006-04-271-0/+9
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@728 edf5b092-35ff-0310-97b2-ce42778d08ea
* - Introduced various new typedefs for windows platform (int32_t, int64_t, ↵thilo2006-04-274-53/+40
| | | | | | | | | etc...) - Applied md5 64-bit safety patch by Tony White. git-svn-id: svn://svn.icculus.org/quake3/trunk@727 edf5b092-35ff-0310-97b2-ce42778d08ea
* - "baseq3" literal replacement patch (by Erik Auerswald) appliedthilo2006-04-266-6/+7
| | | | | | | | - Commented setting of the cl_guid cvar because md5.c is not 64-bit safe. git-svn-id: svn://svn.icculus.org/quake3/trunk@726 edf5b092-35ff-0310-97b2-ce42778d08ea
* strupr'ing demo filenames breaks demo selection on case sensitive file systems.thilo2006-04-261-1/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@725 edf5b092-35ff-0310-97b2-ce42778d08ea
* Replaced various "baseq3" strings with the centrally defined BASEGAME macro.thilo2006-04-263-7/+7
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@724 edf5b092-35ff-0310-97b2-ce42778d08ea
* SunOS -> sunos (patch by Vincent Cojot)ludwig2006-04-232-2/+2
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@723 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix didn't work yet because it didn't use the buffer where the filename ↵thilo2006-04-231-1/+1
| | | | | | extension chop-off is done. D'oh! git-svn-id: svn://svn.icculus.org/quake3/trunk@722 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Oopstma2006-04-231-0/+299
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@721 edf5b092-35ff-0310-97b2-ce42778d08ea
* * cl_guid for semi-reliable server authentication (from tjw)tma2006-04-223-0/+29
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@720 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Anisotropic texture filtering (from Echon)tma2006-04-227-0/+92
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@719 edf5b092-35ff-0310-97b2-ce42778d08ea
* Fix prohibits illegal downloading of id PK3 files from servers. That bug is ↵thilo2006-04-222-2/+9
| | | | | | hit by *every* official server release from ID. git-svn-id: svn://svn.icculus.org/quake3/trunk@718 edf5b092-35ff-0310-97b2-ce42778d08ea
* * Fix to a bug introduced by the fix to the long server uptime bugtma2006-04-221-1/+1
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@717 edf5b092-35ff-0310-97b2-ce42778d08ea
* - botlib logfile now gets stored in the fs_game directory in fs_homepath. ↵thilo2006-04-213-7/+31
| | | | | | | | | | | (patch from Erik Auerswald) - Added proper error handling when fopening qconsole.log - Fixed bug where r_chat.c gets loaded in botlib even when bot_nochat is 1. git-svn-id: svn://svn.icculus.org/quake3/trunk@715 edf5b092-35ff-0310-97b2-ce42778d08ea
* Still some little improvements to flares.thilo2006-04-202-1/+8
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@714 edf5b092-35ff-0310-97b2-ce42778d08ea
* Removed redundant assignment.thilo2006-04-201-1/+0
| | | | git-svn-id: svn://svn.icculus.org/quake3/trunk@713 edf5b092-35ff-0310-97b2-ce42778d08ea