[quake3-bugzilla] [Bug 4249] Segmentation fault in x86 vm compiler with malicious QVM

bugzilla-daemon at icculus.org bugzilla-daemon at icculus.org
Tue May 10 06:10:32 EDT 2011


https://bugzilla.icculus.org/show_bug.cgi?id=4249

--- Comment #5 from Thilo Schulz <arny at ats.s.bawue.de> 2011-05-10 06:10:29 EDT ---
(In reply to comment #4)
> Furthermore, the opStack still needs to be checked. This code will crash
> ioquake3 as well:
> 
> code
> CNSTP4 805306368
> CNSTP4 0
> JUMPV

Fixed in vm_x86_64.c

PPC does not have a problem with this kind of attack because it just keeps
opstack values in registers and never writes them to memory.

-- 
Configure bugmail: https://bugzilla.icculus.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug.


More information about the quake3-bugzilla mailing list