Commit Graph

3395 Commits

Author SHA1 Message Date
Alibek Omarov
adca77672a engine: client: fix crash when loading a save that references non-existing word 2026-05-30 03:53:16 +05:00
Alibek Omarov
ef5295c5ab engine: workaround the misalignment issue when reading textures in BSP 2026-05-30 03:53:16 +05:00
Alibek Omarov
c93cb49a9e engine: client: fix typo in COM_RandomLong 2026-05-27 01:06:27 +05:00
Alibek Omarov
21cc9feca7 engine: client: don't require cookie echo when server didn't negotiate NET_EXT_NETCHAN_COOKIE 2026-05-26 03:10:31 +05:00
Alibek Omarov
e01921dd10 engine: server: bump datagram overflow messages to -dev 2 2026-05-26 02:57:47 +05:00
Alibek Omarov
e5c4e49782 engine: client: introduce cookie protocol extension, when client connects to the server, it provides randomized 64-bit value to be prefixed into netchan messages
* Prevent clientuseragent from leaking data.
* Process qport in netchan, cleaning up code
2026-05-26 02:14:58 +05:00
Alibek Omarov
d61983a5d2 engine: randomize outgoing_sequence on server side 2026-05-26 02:14:58 +05:00
Alibek Omarov
c3f4eb026b engine: only allow net_sequence_window packets, prevent sudden, usually impossible, jumps 2026-05-26 02:14:58 +05:00
SNMetamorph
fe9b8bcaca engine: enable warning when client or server tries to access non-existent cvar 2026-05-25 13:44:26 +05:00
Czarintax
33cd20b21b engine: server: fix SV_ProcessFile crash from short malformed filename (#2606) 2026-05-25 13:42:03 +05:00
SNMetamorph
78a3b958dd engine: client: disable saving testing cvars that potentially could break game 2026-05-24 15:14:15 +04:00
SNMetamorph
0e56fa10f9 engine: client: make cvar cl_ticket_generator privileged 2026-05-24 15:14:15 +04:00
SNMetamorph
b6a67b56b0 engine: client: make cvar cl_steam_broker_addr privileged
(cherry picked from commit e97442f1b04c81ee406779963bd7d58cd586aecf)
2026-05-24 15:14:15 +04:00
Alibek Omarov
eb9de1cac8 engine: fix NET_IsReservedAdr checks for IPv6, treat IPv4-mapped-as-IPv6 as IPv4 2026-05-23 21:23:10 +05:00
Alibek Omarov
24abd2deb2 engine: host: improve missing game libraries message so it's easier to understand 2026-05-23 21:23:10 +05:00
Alibek Omarov
996dcc637d engine: tighten file fragment msg by the (possibly) trunctated frag_message 2026-05-23 21:23:10 +05:00
Alibek Omarov
8b89bdca6f engine: validate size of the message before passing it to COM_UnMunge2 2026-05-23 21:23:10 +05:00
Alibek Omarov
3a6e3ba3ca engine: change Xash split packet id to unsigned short, as it never should be negative 2026-05-23 21:23:10 +05:00
Alibek Omarov
42ab099a07 engine: check server address if client received split packet 2026-05-23 21:23:10 +05:00
Alibek Omarov
09f15042fe engine: add target buffer size argument to MSG_ReadBits and MSG_ReadBytes 2026-05-23 21:23:10 +05:00
Alibek Omarov
25ca2ecb12 engine: fix Netchan_Validate units bug allowing oversized fragments 2026-05-23 03:12:23 +05:00
Alibek Omarov
f6b28e32e2 engine: fix use-after-free in Netchan_CopyNormalFragments on decompression failure; reject oversized fragmented messages. 2026-05-23 02:53:26 +05:00
Alibek Omarov
e118376735 engine: take total size to decompressors in Netchan_CopyNormalFragments, fix underflow when decompressing bzip2 stream 2026-05-23 02:42:28 +05:00
Alibek Omarov
5ef6123f03 engine: append log to the crash log on Android 2026-05-22 18:47:31 +05:00
Владислав Сухов
e4600b5fe0 engine: input: fix PS Vita gyro axis mapping and add gyro debug visualization 2026-05-22 00:53:11 +05:00
Alibek Omarov
fca347dd00 engine: platform: psvita: add Atlas_AllocBlock to the vrtld export list temporarily 2026-05-21 03:07:15 +05:00
SNMetamorph
2a284090ef engine: common: add console command "fs_find" 2026-05-21 02:45:27 +05:00
Alibek Omarov
80ec1c83f1 engine: platform: psvita: add dummy Atlas_AllocBlock call 2026-05-21 01:04:12 +05:00
Alibek Omarov
3e24d5a347 engine: use vector initializer macros 2026-05-20 23:24:36 +05:00
Alibek Omarov
64be4251c8 engine: use designated initializers where possible 2026-05-20 23:24:36 +05:00
Alibek Omarov
3c1cf81c2d engine: platform: refactor variable declarations 2026-05-20 23:24:36 +05:00
Alibek Omarov
c6c1163aa0 engine: common: refactor variable declarations 2026-05-20 23:24:36 +05:00
Alibek Omarov
e8845fc404 engine: client: refactor variable declarations 2026-05-20 23:24:36 +05:00
Alibek Omarov
d49178d5b6 engine: server: refactor variable declarations 2026-05-20 23:24:36 +05:00
a1batross
4c2302ec6c engine: pass customization file fragments into IsSafeFileToDownload
This function already validates customization filenames.
2026-05-20 01:03:03 +05:00
Владислав Сухов
af58ef4a2a engine: menu_int: add flags for mipmaps and alpha channel support in image handling 2026-05-19 19:38:12 +05:00
Владислав Сухов
dbe3f42485 engine: update player logo color to RGB format 2026-05-19 19:38:12 +05:00
Alibek Omarov
334bebb1fb engine: use memcpy when reading sprite model to avoid unaligned access 2026-05-17 12:34:21 +05:00
Alibek Omarov
92bad81d9a engine: client: fix off-by-one 2026-05-17 11:48:20 +05:00
Alibek Omarov
4c667d9d8c engine: client: bound current_position with HISTORY_MASK, in case of something passes invalid values 2026-05-17 11:45:22 +05:00
Alibek Omarov
cb04e9cbd5 engine: server: also use constant time string comparison for sv_password 2026-05-17 11:26:53 +05:00
Alibek Omarov
c2c781f039 engine: server: harden rcon, use constant time comparison, do not output untrusted data to log 2026-05-17 11:23:55 +05:00
Alibek Omarov
fe2019ee06 engine: common: add more cases to COM_IsSafeToDownload 2026-05-17 11:20:00 +05:00
Alibek Omarov
e5c091c303 engine: client: fix off-by-one error in CL_ParseResource 2026-05-17 11:17:42 +05:00
Alibek Omarov
9d050e7ed3 engine: limit decompressed buffer alloc size to 64MiB 2026-05-17 11:17:23 +05:00
Alibek Omarov
be35b3503e engine: limit maximum amount of pending fragbufs 2026-05-17 10:54:51 +05:00
Alibek Omarov
5fad4ae6ca engine: client: mark rcon and connect commands privileged 2026-05-17 10:51:44 +05:00
Alibek Omarov
9082a47348 engine: validate paths before downloading 2026-05-17 10:41:59 +05:00
Alibek Omarov
8120669e5b engine: restore bounds check in Delta_FindStructByIndex, as it gets passed arbitrary numbers too 2026-05-16 21:27:51 +05:00
Alibek Omarov
fb6c4a224c engine: check for overflow in split packet reassembly 2026-05-16 21:13:47 +05:00