Bug#280573: PATCH: Quake2Forge Multiple Remote Vulnerabilities, Minor Bugfixes

2007-09-28 Thread Nico Golde
Hi, @@ -308,7 +310,7 @@ if ( argc 2 ) { - char buffer[1000]; + char buffer[MAX_STRING_CHARS]; int i; strcpy( buffer, Cmd_Argv(1) ); Do I miss something or is this still a buffer overflow? Cmd_Argv(1) will get the second element from cmd_argv[] which will

Bug#280573: PATCH: Quake2Forge Multiple Remote Vulnerabilities, Minor Bugfixes

2005-09-21 Thread Andrei Nazarov
I've prepared a patch that fixes several critical vulnerabilities in Quake2Forge I have found so far, as well as some other minor bugs. All security issues described in [1], exept of #5 (Fake Clients DoS), were fixed, plus some additional ones. This doesn't mean however that client side is