From 8b89bdca6f218cd548013477e76a3dd8ee89b09e Mon Sep 17 00:00:00 2001 From: Alibek Omarov Date: Sat, 23 May 2026 19:41:54 +0500 Subject: [PATCH] engine: validate size of the message before passing it to COM_UnMunge2 --- engine/common/net_chan.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/engine/common/net_chan.c b/engine/common/net_chan.c index 16ac37e0..39b03120 100644 --- a/engine/common/net_chan.c +++ b/engine/common/net_chan.c @@ -1781,8 +1781,8 @@ qboolean Netchan_Process( netchan_t *chan, sizebuf_t *msg ) uint sequence = MSG_ReadLong( msg ); uint sequence_ack = MSG_ReadLong( msg ); - if( chan->use_munge ) - COM_UnMunge2( msg->pData + 8, ( msg->nDataBits >> 3 ) - 8, sequence & 0xFF ); + if( chan->use_munge && MSG_GetMaxBytes( msg ) >= 8 ) + COM_UnMunge2( msg->pData + 8, MSG_GetMaxBytes( msg ) - 8, sequence & 0xFF ); // read the qport if we are a server if( chan->sock == NS_SERVER )