hifuu-club/illusion-arena-engine
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Check for buffer overflow for rail/lightning surfaces

Browse Source
This commit is contained in:
Zack Middleton
2014-01-25 21:14:32 -06:00
parent dde36d91ce
commit cc9072d098
2 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
code/renderergl1/tr_surface.c
View File

@@ -344,6 +344,8 @@ static void DoRailCore( const vec3_t start, const vec3_t end, const vec3_t up, f
int vbase; int vbase;
float t = len / 256.0f; float t = len / 256.0f;
RB_CHECKOVERFLOW( 4, 6 );
vbase = tess.numVertexes; vbase = tess.numVertexes;
spanWidth2 = -spanWidth; spanWidth2 = -spanWidth;

2
code/renderergl2/tr_surface.c
View File

@@ -627,6 +627,8 @@ static void DoRailCore( const vec3_t start, const vec3_t end, const vec3_t up, f
int vbase; int vbase;
float t = len / 256.0f; float t = len / 256.0f;
RB_CHECKOVERFLOW( 4, 6 );
vbase = tess.numVertexes; vbase = tess.numVertexes;
spanWidth2 = -spanWidth; spanWidth2 = -spanWidth;