Add string length checking to function COM_StripExtension. This fixes the R_RemapShader buffer overflow exploit that can be found here:
http://milw0rm.com/exploits/1750
This commit is contained in:
parent
2e368c02a6
commit
d21411452e
13 changed files with 22 additions and 22 deletions
|
@ -3451,7 +3451,7 @@ void FS_FilenameCompletion( const char *dir, const char *ext,
|
|||
Q_strncpyz( filename, filenames[ i ], MAX_STRING_CHARS );
|
||||
|
||||
if( stripExt ) {
|
||||
COM_StripExtension( filename, filename );
|
||||
COM_StripExtension(filename, filename, sizeof(filename));
|
||||
}
|
||||
|
||||
callback( filename );
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue