veygax 0c3c6345e9 engine: imagelib: fix pixel iteration bounds checking on 1-bit BMPs ...

move 1-bit BMP bounds checking to the beginning of a loop to prevent a second iteration

Fixes: [GHSA-3p7j-2339-g5mm](https://github.com/FWGS/xash3d-fwgs/security/advisories/GHSA-3p7j-2339-g5mm)
Signed-off-by: veygax <veyga@veygax.dev>

2025-11-15 12:50:33 +08:00

..

http

engine: move our HTTP client to http subfolder, prepare for curl integration

2025-09-19 09:15:17 +05:00

imagelib

engine: imagelib: fix pixel iteration bounds checking on 1-bit BMPs

2025-11-15 12:50:33 +08:00

soundlib

engine: soundlib: drop SDL-based resampler

2025-05-11 15:27:50 +03:00

base_cmd.c

engine: base_cmd: simplify FindAll

2025-05-25 16:33:11 +05:00

base_cmd.h

engine: base_cmd: simplify FindAll

2025-05-25 16:33:11 +05:00

cfgscript.c

engine: make some global variables static and const, make even more functions static if possible

2024-10-14 19:19:46 +03:00

cmd.c

engine: expect that base_cmd is consistent, as for many years no cases of broken basecmd were found

2025-05-25 16:48:31 +05:00

com_strings.h

engine: now, remove SUPPORT_BSP2_FORMAT macro, only prevent ref_soft from loading such maps

2025-01-09 08:02:39 +03:00

common.c

engine: allow downloading files that have multiple dots in filename. Also disallow everything that has nonprintable characters.

2025-05-06 21:16:06 +03:00

common.h

Migrate to library-suffix library

2025-11-11 06:59:41 +05:00

con_utils.c

engine: introduce vfs.cfg to properly control user set addon folders

2025-09-01 01:42:37 +05:00

custom.c

engine: client: GoldSrc spray support

2025-07-16 23:54:56 +05:00

cvar.c

engine: expect that base_cmd is consistent, as for many years no cases of broken basecmd were found

2025-05-25 16:48:31 +05:00

cvar.h

Revert "common: cvar: make auto descriptions private to cvar subsystem, use them when Cvar_Get is called with NULL description"

2025-02-10 12:49:05 +03:00

dedicated.c

engine: common: fix dedicated build by defining SV_GetMaxClients before CL_GetMaxClients stub (that redirects to it)

2025-01-14 13:10:02 +03:00

filesystem_engine.c

win32: engine: common: client: filesystem: Fix windows build with -Werror=implicit-function-declaration

2025-10-12 00:21:00 +08:00

host_state.c

engine: properly disconnect from online game when loading local game (save, newgame or a level)

2024-07-10 12:32:33 +03:00

host.c

engine: add \n to all Cbuf_AddText calls

2025-10-16 04:36:38 +05:00

hpak.c

public: crtlib: fix Q_pretifymem so it compiles with -Wformat-nonliteral

2025-03-15 14:19:47 +03:00

hpak.h

common: add macro for simultaneously checking data type size for ILP32 and LP64

2024-08-21 12:00:35 +03:00

infostring.c

engine: fix -Wmissing-prototypes

2024-01-28 09:55:18 +03:00

ipv6text.c

engine: common: ipv6text: accept changes from upstream GameNetworkingSockets

2023-08-08 19:38:57 +03:00

ipv6text.h

engine: common: ipv6text: accept changes from upstream GameNetworkingSockets

2023-08-08 19:38:57 +03:00

launcher.c

Restore iOS build support (#2352)

2025-11-01 18:32:00 +05:00

lib_common.c

Migrate to library-suffix library

2025-11-11 06:59:41 +05:00

library.h

filesystem: copy absolute path to library in FS_FindLibrary for compatibility

2024-04-22 04:02:46 +03:00

masterlist.c

engine: remember last resolved master server address for about a minute

2025-11-12 20:04:55 +05:00

mod_alias.c

engine: fix alias model loading

2024-07-21 04:15:56 +03:00

mod_bmodel.c

engine: mod_bmodel: allow firstclipnode index to be negative, as maps compiled with it rely on this trick by encoding whole hull as empty contents

2025-07-16 23:42:49 +05:00

mod_local.h

engine: add file size argument to sprite model loader

2025-10-31 15:56:31 +05:00

mod_sprite.c

engine: add file size argument to sprite model loader

2025-10-31 15:56:31 +05:00

mod_studio.c

engine: fix a typo

2025-02-11 20:06:15 +03:00

model.c

engine: call appropriate model loader on big endian

2025-11-06 23:37:27 +05:00

munge.c

engine: fix some ubsan warnings (alignment, integer limits...)

2024-10-16 00:32:22 +03:00

net_buffer.c

engine: move clc_strings definition to net_buffer, alongside svc_strings

2025-09-06 04:58:34 +05:00

net_buffer.h

engine: net_buffer: turn bit write and read masks into predefined arrays, so we don't have to call InitMasks

2025-01-18 09:54:11 +03:00

net_chan.c

engine: net_chan: added bz2 compression for file fragments

2025-07-16 23:54:56 +05:00

net_encode.c

engine: net_buffer: turn bit write and read masks into predefined arrays, so we don't have to call InitMasks

2025-01-18 09:54:11 +03:00

net_encode.h

engine: common: get rid of NULL sentinels at the end of arrays

2024-12-22 07:22:10 +03:00

net_ws_private.h

engine: split HTTP client into a separate file

2024-10-27 17:07:35 +03:00

net_ws.c

engine: remove global no async resolve switch, platforms that do not support it shall add stubs to engine/platform

2025-09-29 00:12:37 +05:00

net_ws.h

engine: make local ipv4 address private to net_ws, acquire local addresses with GetLocalAddress function

2025-03-20 05:39:02 +03:00

netchan.h

engine: rename MS_SCAN_REQUEST to A2M_SCAN_REQUEST

2025-10-05 10:04:18 +05:00

pm_local.h

engine: common: make some simple functions inlined

2024-10-14 19:20:47 +03:00

pm_surface.c

engine: hack mnode_t struct so we can have 24-bit face and children indices to support BSP2 format in runtime

2025-01-09 08:02:39 +03:00

pm_trace.c

engine: consolidate all box clipnodes used in studio models, pmove and server in a single place

2025-01-09 08:02:39 +03:00

protocol.h

engine: rename MS_SCAN_REQUEST to A2M_SCAN_REQUEST

2025-10-05 10:04:18 +05:00

sounds.c

engine: make some global variables static and const, make even more functions static if possible

2024-10-14 19:19:46 +03:00

sys_con.c

win32: engine: common: client: filesystem: Fix windows build with -Werror=implicit-function-declaration

2025-10-12 00:21:00 +08:00

system.c

engine: make Host_ExitInMain used everywhere, as we depend on sjlj functions on all platforms anyway

2025-09-29 00:06:41 +05:00

system.h

Cleanup xash3d_types.h from engine-specific macros and types

2025-01-22 15:10:18 +03:00

tests.h

engine: fix format error when building tests on 64-bit platforms

2025-10-08 05:08:48 +05:00

whereami.c

engine: whereami: add support for GNU/Hurd

2025-08-13 17:02:22 +05:00

whereami.h

engine: whereami: sync with upstream

2025-01-21 20:03:20 +03:00

world.c

engine: common: make some simple functions inlined

2024-10-14 19:20:47 +03:00

world.h

engine: common: make some simple functions inlined

2024-10-14 19:20:47 +03:00

zone.c

engine: zone: ensure memheader_t size is always expected

2025-02-15 09:31:20 +03:00