Alibek Omarov
|
d61983a5d2
|
engine: randomize outgoing_sequence on server side
|
2026-05-26 02:14:58 +05:00 |
|
Alibek Omarov
|
c3f4eb026b
|
engine: only allow net_sequence_window packets, prevent sudden, usually impossible, jumps
|
2026-05-26 02:14:58 +05:00 |
|
SNMetamorph
|
fe9b8bcaca
|
engine: enable warning when client or server tries to access non-existent cvar
|
2026-05-25 13:44:26 +05:00 |
|
Czarintax
|
33cd20b21b
|
engine: server: fix SV_ProcessFile crash from short malformed filename (#2606)
|
2026-05-25 13:42:03 +05:00 |
|
SNMetamorph
|
78a3b958dd
|
engine: client: disable saving testing cvars that potentially could break game
|
2026-05-24 15:14:15 +04:00 |
|
SNMetamorph
|
0e56fa10f9
|
engine: client: make cvar cl_ticket_generator privileged
|
2026-05-24 15:14:15 +04:00 |
|
SNMetamorph
|
b6a67b56b0
|
engine: client: make cvar cl_steam_broker_addr privileged
(cherry picked from commit e97442f1b04c81ee406779963bd7d58cd586aecf)
|
2026-05-24 15:14:15 +04:00 |
|
Alibek Omarov
|
eb9de1cac8
|
engine: fix NET_IsReservedAdr checks for IPv6, treat IPv4-mapped-as-IPv6 as IPv4
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
24abd2deb2
|
engine: host: improve missing game libraries message so it's easier to understand
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
996dcc637d
|
engine: tighten file fragment msg by the (possibly) trunctated frag_message
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
8b89bdca6f
|
engine: validate size of the message before passing it to COM_UnMunge2
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
3a6e3ba3ca
|
engine: change Xash split packet id to unsigned short, as it never should be negative
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
42ab099a07
|
engine: check server address if client received split packet
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
09f15042fe
|
engine: add target buffer size argument to MSG_ReadBits and MSG_ReadBytes
|
2026-05-23 21:23:10 +05:00 |
|
Alibek Omarov
|
25ca2ecb12
|
engine: fix Netchan_Validate units bug allowing oversized fragments
|
2026-05-23 03:12:23 +05:00 |
|
Alibek Omarov
|
f6b28e32e2
|
engine: fix use-after-free in Netchan_CopyNormalFragments on decompression failure; reject oversized fragmented messages.
|
2026-05-23 02:53:26 +05:00 |
|
Alibek Omarov
|
e118376735
|
engine: take total size to decompressors in Netchan_CopyNormalFragments, fix underflow when decompressing bzip2 stream
|
2026-05-23 02:42:28 +05:00 |
|
Alibek Omarov
|
5ef6123f03
|
engine: append log to the crash log on Android
|
2026-05-22 18:47:31 +05:00 |
|
Владислав Сухов
|
e4600b5fe0
|
engine: input: fix PS Vita gyro axis mapping and add gyro debug visualization
|
2026-05-22 00:53:11 +05:00 |
|
Alibek Omarov
|
fca347dd00
|
engine: platform: psvita: add Atlas_AllocBlock to the vrtld export list temporarily
|
2026-05-21 03:07:15 +05:00 |
|
SNMetamorph
|
2a284090ef
|
engine: common: add console command "fs_find"
|
2026-05-21 02:45:27 +05:00 |
|
Alibek Omarov
|
80ec1c83f1
|
engine: platform: psvita: add dummy Atlas_AllocBlock call
|
2026-05-21 01:04:12 +05:00 |
|
Alibek Omarov
|
3e24d5a347
|
engine: use vector initializer macros
|
2026-05-20 23:24:36 +05:00 |
|
Alibek Omarov
|
64be4251c8
|
engine: use designated initializers where possible
|
2026-05-20 23:24:36 +05:00 |
|
Alibek Omarov
|
3c1cf81c2d
|
engine: platform: refactor variable declarations
|
2026-05-20 23:24:36 +05:00 |
|
Alibek Omarov
|
c6c1163aa0
|
engine: common: refactor variable declarations
|
2026-05-20 23:24:36 +05:00 |
|
Alibek Omarov
|
e8845fc404
|
engine: client: refactor variable declarations
|
2026-05-20 23:24:36 +05:00 |
|
Alibek Omarov
|
d49178d5b6
|
engine: server: refactor variable declarations
|
2026-05-20 23:24:36 +05:00 |
|
a1batross
|
4c2302ec6c
|
engine: pass customization file fragments into IsSafeFileToDownload
This function already validates customization filenames.
|
2026-05-20 01:03:03 +05:00 |
|
Владислав Сухов
|
af58ef4a2a
|
engine: menu_int: add flags for mipmaps and alpha channel support in image handling
|
2026-05-19 19:38:12 +05:00 |
|
Владислав Сухов
|
dbe3f42485
|
engine: update player logo color to RGB format
|
2026-05-19 19:38:12 +05:00 |
|
Alibek Omarov
|
334bebb1fb
|
engine: use memcpy when reading sprite model to avoid unaligned access
|
2026-05-17 12:34:21 +05:00 |
|
Alibek Omarov
|
92bad81d9a
|
engine: client: fix off-by-one
|
2026-05-17 11:48:20 +05:00 |
|
Alibek Omarov
|
4c667d9d8c
|
engine: client: bound current_position with HISTORY_MASK, in case of something passes invalid values
|
2026-05-17 11:45:22 +05:00 |
|
Alibek Omarov
|
cb04e9cbd5
|
engine: server: also use constant time string comparison for sv_password
|
2026-05-17 11:26:53 +05:00 |
|
Alibek Omarov
|
c2c781f039
|
engine: server: harden rcon, use constant time comparison, do not output untrusted data to log
|
2026-05-17 11:23:55 +05:00 |
|
Alibek Omarov
|
fe2019ee06
|
engine: common: add more cases to COM_IsSafeToDownload
|
2026-05-17 11:20:00 +05:00 |
|
Alibek Omarov
|
e5c091c303
|
engine: client: fix off-by-one error in CL_ParseResource
|
2026-05-17 11:17:42 +05:00 |
|
Alibek Omarov
|
9d050e7ed3
|
engine: limit decompressed buffer alloc size to 64MiB
|
2026-05-17 11:17:23 +05:00 |
|
Alibek Omarov
|
be35b3503e
|
engine: limit maximum amount of pending fragbufs
|
2026-05-17 10:54:51 +05:00 |
|
Alibek Omarov
|
5fad4ae6ca
|
engine: client: mark rcon and connect commands privileged
|
2026-05-17 10:51:44 +05:00 |
|
Alibek Omarov
|
9082a47348
|
engine: validate paths before downloading
|
2026-05-17 10:41:59 +05:00 |
|
Alibek Omarov
|
8120669e5b
|
engine: restore bounds check in Delta_FindStructByIndex, as it gets passed arbitrary numbers too
|
2026-05-16 21:27:51 +05:00 |
|
Alibek Omarov
|
fb6c4a224c
|
engine: check for overflow in split packet reassembly
|
2026-05-16 21:13:47 +05:00 |
|
Alibek Omarov
|
166763a887
|
engine: common: limit amount of delta encoded fields by 64 in GoldSrc protocol (because this is the maximum it allows anyway)
|
2026-05-16 21:12:49 +05:00 |
|
Alibek Omarov
|
e56cf4e1da
|
engine: client: validate player index and max players
|
2026-05-16 21:00:50 +05:00 |
|
Alibek Omarov
|
fc4b982ecc
|
engine: client: correctly skip message that would overflow temp entity buffer
|
2026-05-16 20:59:57 +05:00 |
|
Alibek Omarov
|
d305292340
|
engine: zone: in CheckAlloc walk through over both allocation chains, so that we don't read out of bounds if passed pointer is not allocated by zone allocator
|
2026-05-16 12:56:49 +05:00 |
|
Alibek Omarov
|
9ee6be87d7
|
engine: host: try to avoid recursive Host_Error
|
2026-05-16 12:37:08 +05:00 |
|
Alibek Omarov
|
4e4a54ab68
|
engine: despite byte-swapping code is no-op on little endian, it still fires and can read out of bounds on some models, leading to crash
|
2026-05-16 12:21:46 +05:00 |
|