Menu

#38 buffer overflow with >31 char skybox name

None
closed-fixed
nobody
None
5
2020-04-13
2019-12-03
No

Reported by iw here: http://celephais.net/board/view_thread.php?id=3&start=16293&end=16293

in gl_sky.c:
char skybox_name[32] = ""; //name of current skybox, or "" if no skybox
..
strcpy(skybox_name, name);

Discussion

  • Ozkan Sezer

    Ozkan Sezer - 2019-12-03

    Lazy workaround would be making it [1024]

     
  • Eric Wasylishen

    Eric Wasylishen - 2020-04-13

    Fixed in r1669 with Oz's patch

     
  • Eric Wasylishen

    Eric Wasylishen - 2020-04-13
    • status: open --> closed-fixed
     

Log in to post a comment.

MongoDB Logo MongoDB