[quake3-commits] [ioquake/ioq3] b9061c: Fix cg.skulltrails out of bounds access in Team Ar...

Zack Middleton zturtleman at gmail.com
Thu May 1 22:38:59 EDT 2014


  Branch: refs/heads/master
  Home:   https://github.com/ioquake/ioq3
  Commit: b9061c84473bc439529b6fe54ac2c8241297c408
      https://github.com/ioquake/ioq3/commit/b9061c84473bc439529b6fe54ac2c8241297c408
  Author: Zack Middleton <zturtleman at gmail.com>
  Date:   2014-05-01 (Thu, 01 May 2014)

  Changed paths:
    M code/cgame/cg_players.c

  Log Message:
  -----------
  Fix cg.skulltrails out of bounds access in Team Arena Harvester mode

In Team Arena's Harvester mode, players corrupt your memory from beyond
the grave. Gib the players to stop the corruption!

CG_PlayerTokens is called for player entities, including corpses.
The entity number is used for the index in cg.skulltrails which only has
MAX_CLIENTS elements. This results in incorrect memory being overwritten
for corpse entities (as the entity number is >= MAX_CLIENTS).

So limit skull trails to valid entities (entity number < MAX_CLIENTS).




More information about the quake3-commits mailing list