okseby/Quake-III-Arena
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Check for buffer overflow for rail/lightning surfaces

Browse source
This commit is contained in:
Zack Middleton 2014-01-25 21:14:32 -06:00
parent dde36d91ce
commit cc9072d098
2 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
code/renderergl1/tr_surface.c
View file

@ -344,6 +344,8 @@ static void DoRailCore( const vec3_t start, const vec3_t end, const vec3_t up, f
int vbase; int vbase;
float t = len / 256.0f; float t = len / 256.0f;
RB_CHECKOVERFLOW( 4, 6 );
vbase = tess.numVertexes; vbase = tess.numVertexes;
spanWidth2 = -spanWidth; spanWidth2 = -spanWidth;

2
code/renderergl2/tr_surface.c
View file

@ -627,6 +627,8 @@ static void DoRailCore( const vec3_t start, const vec3_t end, const vec3_t up, f
int vbase; int vbase;
float t = len / 256.0f; float t = len / 256.0f;
RB_CHECKOVERFLOW( 4, 6 );
vbase = tess.numVertexes; vbase = tess.numVertexes;
spanWidth2 = -spanWidth; spanWidth2 = -spanWidth;