Kawe Mazidjatari 7912b79fa2 CL_CopyExistingEntity: implement missing bounds check ...

Implement bounds check for non-sanitized value of u.m_nNewEntity.
Debug builds of the engine have an assertion, however in release these are stripped.
This fixes a full chain client RCE exploit, for more information, see: https://ctf.re/source-engine/exploitation/2021/05/01/source-engine-2/

2022-09-21 02:38:58 +02:00

..

appframework

CEngineAPI vftable implementation

2022-08-29 01:14:53 +02:00

bonesetup

Upgrade mathlib to latest

2022-07-08 00:55:01 +02:00

bsplib

Remove 'm' prefix from dll globals

2022-08-09 03:02:00 +02:00

client

Change VFTavle indexes from read only to contant

2022-08-31 14:38:49 +02:00

common

CClient: add rate limit logic for 'ProcessStringCmd'

2022-09-20 22:48:55 +02:00

core

CL_CopyExistingEntity: implement missing bounds check

2022-09-21 02:38:58 +02:00

datacache

Light cleanup

2022-09-14 01:14:51 +02:00

ebisusdk

Add 'fatal' functionality to Error()

2022-08-22 12:42:41 +02:00

engine

CL_CopyExistingEntity: implement missing bounds check

2022-09-21 02:38:58 +02:00

filesystem

Major cleanup (see description)

2022-08-18 02:15:23 +02:00

game

add global text chat

2022-09-18 20:42:16 +01:00

gameui

Refresh server list when the browser is activated

2022-09-14 02:39:55 +02:00

inputsystem

Change VFTavle indexes from read only to contant

2022-08-31 14:38:49 +02:00

launcher

Fix spelling errors

2022-09-09 19:47:31 +02:00

materialsystem

Fixed bug when reading text files using internal file system

2022-09-01 01:05:15 +02:00

mathlib

Logging bug fix and error handling improvements

2022-09-14 00:39:38 +02:00

milessdk

Remove 'm' prefix from dll globals

2022-08-09 03:02:00 +02:00

naveditor

General cleanup

2022-08-09 15:19:12 +02:00

netconsole

Improve threading (work in progress)

2022-08-27 18:57:56 +02:00

networksystem

Rename 'Reputation_t' enumerant

2022-09-20 02:04:25 +02:00

pluginsdk

remove testing code from CPluginSDK::InitSDK(()

2022-08-21 11:28:50 +02:00

pluginsystem

Fix spelling errors

2022-09-09 19:47:31 +02:00

protoc

Heavily reduce what is needed from protobuf (lite implementation)

2022-02-24 12:47:18 +01:00

public

CL_CopyExistingEntity: implement missing bounds check

2022-09-21 02:38:58 +02:00

resource

CClient: add rate limit logic for 'ProcessStringCmd'

2022-09-20 22:48:55 +02:00

rtech

RPakHeader_t/RPakLoadedInfo_t additions

2022-09-18 13:55:44 +02:00

sdklauncher

Increase 'Playlists file' text rect

2022-09-11 16:37:14 +02:00

server

CClient: add rate limit logic for 'ProcessStringCmd'

2022-09-20 22:48:55 +02:00

squirrel

SQVM: use const qualifiers for SQCONTEXT

2022-09-19 01:18:14 +02:00

studiorender

Remove 'm' prefix from dll globals

2022-08-09 03:02:00 +02:00

thirdparty

CConsole: fixed color bug when missing newline

2022-09-19 20:21:18 +02:00

tier0

Update SDK version to 'VGameSDK004'

2022-09-19 20:21:40 +02:00

tier1

CClient: add rate limit logic for 'ProcessStringCmd'

2022-09-20 22:48:55 +02:00

tier2

Light cleanup

2022-09-14 01:14:51 +02:00

vgui

CLogSystem: make notify fade out animation 500ms slower

2022-09-19 01:46:35 +02:00

vguimatsurface

Remove 'm' prefix from dll globals

2022-08-09 03:02:00 +02:00

vpc

Fix concurrent access to 'g_vAllPlaylists' and 'g_vAllMaps'

2022-08-29 11:55:58 +02:00

vphysics

General cleanup

2022-08-09 15:19:12 +02:00

vpklib

Light cleanup

2022-09-14 01:14:51 +02:00

vproj

CL_CopyExistingEntity: implement missing bounds check

2022-09-21 02:38:58 +02:00

vstdlib

Light warning string cleanup

2022-09-19 01:17:34 +02:00

windows

Light cleanup

2022-09-14 01:14:51 +02:00

ClientSDK.def

Add client build only to SDK (client.dll)

2022-03-23 23:05:43 +01:00

cpp.hint

Update cpp.hint

2022-08-14 15:19:03 +02:00

Dedicated.def

Finished project overhaul

2022-02-22 15:19:32 +01:00

GameSDK.def

See description

2022-04-16 00:30:46 +02:00

PropertySheet.props

Initial Commit.

2021-04-13 04:45:22 -07:00

R5Dev.props

Create R5Dev.props

2022-02-22 15:20:08 +01:00