From fc4b982ecc98c2f7714ec6ef2da483215f634235 Mon Sep 17 00:00:00 2001 From: Alibek Omarov Date: Sat, 16 May 2026 20:59:57 +0500 Subject: [PATCH] engine: client: correctly skip message that would overflow temp entity buffer --- engine/client/cl_tent.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/engine/client/cl_tent.c b/engine/client/cl_tent.c index 97bb7b74..761b19c6 100644 --- a/engine/client/cl_tent.c +++ b/engine/client/cl_tent.c @@ -1900,7 +1900,11 @@ void CL_ParseTempEntity( sizebuf_t *msg, connprotocol_t proto ) // this will probably be fatal anyway if( iSize > sizeof( msg_data )) + { Con_Printf( S_ERROR "%s: Temp buffer overflow!\n", __func__ ); + MSG_SeekToBit( msg, iSize << 3, SEEK_CUR ); + return; + } // parse user message into buffer MSG_ReadBytes( msg, msg_data, iSize );